Zeekr 007

Security Grade

Calculator v1

Zeekr 007

   Brand: Zeekr (Parent: Geely)

   Category: Car • Model / Gen: 1 Standard Range, Long Range, Performance

   Release Date: 2023-12-27 • Status: In sale

   Classification Date: 2025-10-05 • Official Website

Security Evaluation

Criterion	Value	Proof	Comment
Known hardware tampering	None	🔗 Proof	Highly integrated vehicle platform. Unauthorized physical tampering is extremely difficult and would trigger system alerts. No public reports of supply chain tampering.
Known vulnerabilities	Rare	🔗 Proof	Zeekr and Geely operate a dedicated security response center. Vulnerabilities are addressed via mandatory and frequent Over-the-Air (OTA) updates.
Prior attacks	Rare	🔗 Proof	No publicly documented, widespread security breaches have been successful against the Zeekr vehicle platform.
Updatability	Very common	🔗 Proof	A core feature. The vehicle supports full-vehicle OTA (FOTA) updates, covering the intelligent cockpit, driving assistance systems, and vehicle control modules.
Category Score	Score: 2 / 3

Criterion	Value	Proof	Comment
Authentication with other systems	Full	🔗 Proof	The vehicle maintains a persistent, secure connection to the Zeekr cloud for remote control, vehicle diagnostics, and data-driven services.
Communications	Encrypted with up-to-date encryption	🔗 Proof	All data communication between the vehicle, the cloud, and the companion app is protected by end-to-end encryption using industry-standard protocols.
Storage	Encrypted with up-to-date encryption	🔗 Proof	All sensitive user data, including biometric information and driving data, is encrypted at rest both on the vehicle's internal storage and in the cloud.
Category Score	Score: 1 / 3

Criterion	Value	Proof	Comment
Account management	Full	🔗 Proof	A Zeekr account is mandatory for all smart features. The system supports multiple driver profiles with personalized settings.
Authentication	Secure	🔗 Proof	Multi-modal authentication: Phone as a Key (PaaK via Bluetooth/UWB), NFC card, facial recognition for driver login, and a PIN for sensitive vehicle settings.
Brute-force protection	Exist	🔗 Proof	The in-vehicle system locks out after multiple incorrect PIN attempts. The cloud account has standard server-side brute-force protection.
Event logging	Access event logged	[1] 🔗 Proof]	The vehicle maintains comprehensive diagnostic and access logs. The cloud service logs all account access events for security auditing.
Passwords	Require change after setup with complexity requirements	🔗 Proof	The required Zeekr account enforces password complexity. An in-vehicle PIN for sensitive operations must be set by the user.
Category Score	Score: 1 / 3

Property	Details
Operating System & App	Zeekr OS 6.0 (Companion App: Zeekr App (极氪App, for iOS and Android))
Hardware (CPU / GPU)	CPU: Qualcomm Snapdragon 8295 (Automotive Grade SoC) • GPU: Qualcomm Adreno 740
Memory & Storage	Memory: 16GB+ LPDDR5X RAM • Storage: 256GB/512GB UFS 4.0 Storage
Power, Battery & Charging	Battery: 75 kWh Golden Brick LFP / 100 kWh Qilin NMC Battery • Power: Single/Dual Electric Motors • Charging: 800V Architecture, AC Charging, DC Fast Charging
Display & Camera	Display: 15.05-inch 2.5K OLED central screen, 35.5-inch AR-HUD • Camera: Multiple HD cameras & LiDAR for Zeekr AD (NZP)
Sound & Connectivity	Sound: 21-speaker Yamaha Surround Sound System • Connectivity: 5G, Wi-Fi 6, Bluetooth 5.2, GPS, NFC, UWB
Physical (Dimensions & Mass)	Dimensions: 4865 x 1900 x 1450 mm • Mass: ~2150 - 2280 kg