How I work

Alexander Much

Founder, Safionyx GmbH & Co. KG

Alexander Much works on functional safety, automotive cybersecurity, software quality and open-source compliance. He founded Safionyx in January 2026 after more than twenty years in automotive and embedded software development.

He is based in Karlsruhe and works with clients across Europe, in German and English.

Background

Twenty years in series development

From 2003 to 2025 he worked in the automotive software industry, beginning as a developer and moving through architecture and technical leadership into management. From 2004 onwards his work included cryptography and embedded security, at a time when vehicle security was an engineering topic rather than a regulated one.

In his final role he held director-level responsibility for quality, functional safety, cybersecurity and open source, with engineering organisations of more than sixty people. That work covered series development programmes subject to customer audits and assessments — which means he has been on the receiving end of the same measures he now carries out.

He holds a degree in mathematics from the University of Cambridge.

Qualifications and involvement

Assessor qualification

Certified INTACS Principal Assessor for Automotive SPICE® with Security Extension. He also contributes to intacs working groups.

Programme committees

Member of the programme committees of EuroSPI and VDA Automotive SYS, where submitted papers are reviewed and the conference programme is put together.

Publications

Author or co-author of more than fifty peer-reviewed publications on software engineering, safety and security.

Publications →

Safionyx is a member of the ASQF and of the CyberForum, the high-tech business network of the Karlsruhe technology region.

The practice

What Safionyx is

Safionyx is a one-person practice. Engagements are carried out by Alexander Much rather than delegated, which sets a limit on how much work can run at once and is the reason engagements usually start small.

Two boundaries follow from the same fact. Safionyx does not issue certificates, because that requires accreditation with a national body. And where Safionyx has helped shape a process, a re-assessment of that process is carried out by an independent assessor.

LinkedIn →

Scroll to Top