Key functionalities already proven in a demonstration environment.
Secure your machines today – CRA-ready for tomorrow.
Cyber incidents are a real risk for production. With the EU Cyber Resilience Act (CRA), security becomes a requirement for every machine with digital elements. We are already preparing our machines for it – for new machines and for your installed base.
Why cyber security matters now
Imagine this: it’s Monday morning, your production line is ready – and the HMI shows a message you’ve never seen before. Your machine is locked, and someone wants money to unlock it.
Unfortunately, this scenario is realistic. And in food, pharma and cosmetics, every hour of downtime is expensive – especially when batches are lost. The EU has responded with the Cyber Resilience Act: CRA reporting obligations apply since September 2026, and from December 2027 all requirements apply to products with digital elements – including machines. Machines that are not CRA-compliant can then no longer be placed on the EU market.
Why act before 2027? Early adoption reduces future implementation effort, and security measures can be integrated step by step – even into existing machines.
The right protection for every machine
We are already preparing our machines for future cyber security requirements.
Rather than pursuing maximum security at any cost, our objective is an appropriate level of protection. Together with leading European cyber security partners, we are building the foundation for future-ready, CRA-aligned machine concepts.
Typical situation in today’s production
Devices are connected – but communication is not controlled.
It often starts with something ordinary: a service technician connects a laptop for a routine job – and nobody knows it’s infected. In a flat network, nothing stops the malware. It reaches the HMI, the PLC and the IO-Link devices, and moves on to the next machine.
Today’s setup
- Flat network without controlled communication flows
- Limited visibility of firmware and software
- Remote access not centrally controlled or monitored
- No standardized process for updates and vulnerability handling
Missing control
- One compromised access point can affect the entire machine
- Uncontrolled lateral movement across connected machines can lead to production downtime
- No clear understanding of incidents and root causes
- Difficult to prove compliance in audits
One entry point can impact your entire production.
How to bring control into your OT network
A structured approach – from basic connectivity to full control and compliance.
| Level 1: Connectivity & basic structure | Level 2: Advanced control (recommended) | |
|---|---|---|
| Firewall | Stateful firewall | Next-generation firewall (NGFW) |
| Inspection | Layer 3–4: source, destination and ports | Up to Layer 7: deep packet inspection, application control, intrusion detection and prevention |
| Remote access | Secure remote access (VPN) | Secure remote access with MFA |
| Segmentation | Network segmentation (VLAN) | Each component group in its own VLAN – only allowed communication |
| Visibility | Basic logging | Full visibility of communication flows, extended logging and traceability |
| Lateral movement | Partially possible | Prevented between components |
| Compliance | Covers core CRA requirements | Enables CRA compliance and audits, extended features beyond CRA requirements |
Level 1 is state of the art and sufficient for many machines. Level 2 is the right choice where maximum transparency and control are needed.
Scalable from structure to control: start with Level 1 and move to Level 2 later. Switch, cabling and components stay the same – only the security gateway and its configuration change.
With Level 2, an infected service laptop doesn’t lead to a locked machine on Monday morning – but to a log entry on Friday afternoon.
More than a security gateway
Six further building blocks for secure machines with digital elements.
Together with the network concept, these building blocks keep your machine secure – not just on delivery day, but for its entire lifetime.
What’s in it for you
New machines
- Future-proof investment aligned with EU cyber security regulation (CRA)
- Reduced cyber risk and minimized downtime
- Transparent software and firmware documentation (SBOM-based)
- Structured vulnerability and update management
- Improved audit readiness
Existing machines
- Cyber security upgrade for your installed base
- Lower risk without reinvestment
- Firmware and software transparency
- Structured mitigation for legacy systems
- Audit-ready operations
How we support you
From assessment to secure operation – we guide you end-to-end.
In addition: support for NIS2-related requirements
Many operators fall under NIS2 themselves and need to show how the machines in their plant are protected. We support you with:
- Security documentation
- Proof of your machines’ cyber security
- Support for secure system integration
Ready for your security journey?
Find out where your machines stand today. Our modular approach ranges from a cost-efficient entry level to a fully secure and compliant solution – pricing depends on machine complexity and your requirements. We start with an assessment together.
