Industries · IIoT & Energy
Less energy, fewer service calls, less electronic waste. To that end, we develop electronics, firmware and gateways for industry and energy technology and operate the devices as a fleet in qdCloud. We share the obligations under the Cyber Resilience Act with you to the agreed extent, on request for as long as the device is on the market.
Why projects start
The predecessor has run for years, components are discontinued, and the firmware was never designed for connectivity. The successor needs new electronics and a secured update path.
Safe torque off, safe stop, safe brake: machine builders now expect the device itself to do what a contactor once handled.
From December 2027, every product with digital elements must be able to fix vulnerabilities. We review the software, create the SBOM and assess the update path for your existing device.
Regulation
Regulation (EU) 2024/2847. The reporting obligations have applied since 11 September 2026, the product requirements apply from 11 December 2027, and the support period is in principle at least five years. We take on monitoring vulnerabilities, assessing them and providing updates to the agreed extent, on request for as long as the device is on the market.
Security for automation systems. Threat analysis first, then security requirements, then the architecture: secure boot, encrypted storage, protected connection, roles in the application.
Radio equipment with internet access has had to meet the cybersecurity requirements of the Radio Equipment Directive since August 2025. For devices with Wi-Fi, Bluetooth or cellular, we build the measures in from the start.
Functional safety up to SIL 3 under IEC 61508 and up to PL e under ISO 13849. The tool qualification that IEC 61508 requires is in place for our unit test framework.
From January 2027, cybersecurity is part of the CE marking of machinery. The associated standard, prEN 50742, exists as a draft; we are already aligning controllers with it.
Sales, development and manufacturing are certified to ISO 9001. The information security management system behind it is built to ISO/IEC 27001 and is currently going through certification.
We work to these standards and regulations.
A device is sold in a day. It is operated for years.
IIoT & Energy
A two-channel safety subsystem with its own FSoE stack, tested in a hardware-in-the-loop system with a qualified toolchain. The client places the product on the market and is responsible for regulatory approval tests and type examination.
IIoT & Energy
For a product family of drive controls, a C++ platform on which the client defines the sequences of its customer applications as a state diagram, generates code from it, builds the firmware and flashes it to the device. AI helps on the way from requirement to diagram, not in the product.
IIoT & Energy
Concept, hardware and configuration of a contactless Qi charging station for torque tools, from proof-of-concept to EMC pre-testing.
Series production
A patch is worth nothing until it reaches the device. Through qdCloud we roll out firmware and configuration to fleets of any size, following your rollout strategy and with system load in mind.
Your device's libraries, kernel and images stay under observation. We assess new vulnerabilities against your device and prepare the content of the report. That way you are prepared for the reporting deadlines of the Cyber Resilience Act.
Secure access to every device in the infrastructure, with live support and screen sharing. We record faults, investigate them and bring the fix back into the field.
We monitor your bills of materials and report discontinuations before they become a supply stop. If a replacement part is not a one-to-one fit, we change the design and verify the change.
Matching platform modules
qdGate as the IoT gateway, qdSBC as the single-board computer, plus the qdSOM module. Free pins and interfaces for your sensors; retrofit without replacing the controller.
View
Buildroot-based Linux with a mainline LTS kernel. The device side for updates, logging and certificates is already built in.
View
Fleet overview, updates and remote access for connected devices. Hosted in Europe or on your own infrastructure.
View
Programming and testing every board at the end of the line. Stays valid even when a component changes.
ViewServices
Requirements, architecture and system boundaries before the first board exists.
Power supply, battery management, radio and high-speed, designed for ten years of component availability.
Firmware, embedded Linux and the application on top, for devices with a long service life.
Web interfaces on the device, services behind them and the connection to the system you already run.
Recognising conditions and anomalies on the device itself, with the model delivered in the signed update.
Unit tests through EMC measurement, with reports you can present in an audit.
Secure boot, signed updates and vulnerability management throughout the service life.
No. We also connect your device to your own cloud or your ERP. The service is the development; qdCloud is an option.
No. A gateway collects states and energy data at the controller and brings them online; the controller stays. If it needs updates itself, replacing it is the alternative. We assess both routes with you.
In Europe (Germany only on request) or on your own infrastructure. The setup is the same; you decide where it runs.
The duty lies with the manufacturer, which means you. We provide the basis: we detect the vulnerability, assess it against your device and prepare the content of the report.
Tell us about the device, the volume and your schedule. We will tell you how we would approach the project and where we see risks for operation and regulatory approval. The assessment, up to an indicative price, is free of charge.
