Skip to content
NOGTechnologien UG
DE EN
Start a project
SRV Services · 6 disciplines

From sensor
to SOC.

We take on complete projects or strengthen your team where needed. Every service ends with a result you can keep running without us.

IndustriesManufacturing · logistics · energy · ports
RegionDACH · remote
StandardsIEC 62443 · ISO 27001
AUT 01 / 06

Automation systems

We program controllers, connect existing equipment and build gateways that process machine data in real time. Proven logic stays in place. We add what is missing: clean interfaces, traceable alarms and data that production and maintenance can rely on.

  • PLC programming to IEC 61131-3 (ST, SFC, FBD), retrofits of S7 and CODESYS controllers
  • OPC UA and MQTT bridges with Sparkplug B, buffering during network outages
  • Web HMI with alarming, recipes and role-based access
  • Commissioning with FAT/SAT records
IEC 61131-3OPC UAMQTTPROFINETModbus/TCPNode-RED
OutcomeRunning system + docs
Typical duration4–12 weeks
SEC 02 / 06

Security tools & hardening

Our own tools run passively on a mirror port. They never send a single packet into the production network. The result is a complete inventory with firmware versions, open services and communication paths. On that basis we harden systems against recognised benchmarks and check their state automatically.

  • Passive asset inventory (S7comm, Modbus, EtherNet/IP, PROFINET)
  • Matching against CVE and ICS advisories, prioritised by reachability
  • Hardening against CIS benchmarks, versioned as code
  • Penetration tests with remediation plan and retest
IEC 62443SuricataZeekWireGuardeBPFCIS
OutcomeInventory + risk report
Typical duration1–3 weeks
MON 03 / 06

Monitoring & SOC integration

We bring together events from firewalls, controllers, servers and our network sensor. Every rule is documented and tested. We tune alerting with your team so that important alerts do not drown in a flood of noise.

  • Central log platform on premises or in German data centres
  • Detection rules as Sigma code with test cases
  • Integration with existing SOC or MSSP services
  • Reporting workflows for NIS2 deadlines (24 h / 72 h)
WazuhPrometheusGrafanaSigmaOpenSearch
OutcomeDashboards + runbooks
Operation24/7 by agreement
EMB 04 / 06

Embedded & hardware

We develop firmware for sensors, gateways and control units. Security is built in from the start: verified boot, keys stored in a secure element and updates that only install with a valid signature. For the Cyber Resilience Act we also deliver the SBOM and a vulnerability handling process.

  • Rust and C on Zephyr RTOS or embedded Linux (Yocto)
  • Secure boot, TPM 2.0 / secure element, signed OTA updates
  • CycloneDX SBOM and CRA-ready documentation
RustZephyrYoctoTPM 2.0OTACycloneDX
OutcomeFirmware + build pipeline
Typical duration8–20 weeks
OPS 05 / 06

Cloud & DevOps pipelines

We describe infrastructure as code, so every environment can be rebuilt at any time. Builds are signed, dependencies are checked and deployments roll out in small, reversible steps. This works in the cloud just as well as in your own data centre.

  • Kubernetes, Terraform, GitLab CI / GitHub Actions
  • Signed containers and supply chain checks (SLSA)
  • Secrets management and least privilege
KubernetesTerraformGitLab CISLSAVault
OutcomePipeline + IaC repo
Typical duration3–8 weeks
ANO 06 / 06

AI anomaly detection

Our models learn what normal operation looks like from cycle times, power draw and communication patterns. When something deviates, you get an alert with a reason: which signal, by how much, since when. That might be a bearing slowly running hot, or a computer that suddenly starts talking to a PLC.

  • Unsupervised learning on time series directly on the edge gateway
  • Explainable alerts instead of black-box scores
  • Data stays on site, no cloud required
PythonONNXTimescaleDBIsolation Forest
OutcomeModel + alert rules
Learning phaseapprox. 7–14 days
Exploded view of an industrial edge security gateway
Housing lidAluminium, passively cooled, IP40
Heat sinkFanless from −20 to +60 °C
SoCARM processor with secure boot
TPM 2.0Keys never leave the chip
2× RJ45Separate ports for mirror (read-only) and management
I/O terminalsDigital inputs, e.g. cabinet door contact
24 V DCIndustrial power supply
DIN rail clipMounts on a TS35 rail in the cabinet
HW Hardware development

From schematic to small series.

An example from our engineering: a fanless edge gateway for DIN rail mounting. Hover the points to see the components.

  • PCB layout, housing design and EMC pre-compliance
  • Firmware, update server and production tests from one team
  • Documentation for CE and the Cyber Resilience Act
PRC Process · four phases

How a project with us works.

Understand first, then build, then support. The order is fixed, the scope follows your plant.

01approx. 1–3 weeks

Analysis & risk assessment

Site walk, network capture and interviews with operations and maintenance. We record what is really there, not just what the drawings say.

  • Asset inventory
  • As-is network plan
  • Risk analysis per IEC 62443-3-2
  • Prioritised actions
02approx. 1–2 weeks

Architecture & design

Zone and conduit model, data flows and interfaces. Plus an implementation plan with effort, order and maintenance windows.

  • Target architecture
  • Measures catalogue
  • Budget frame
  • Acceptance criteria
03depending on scope

Implementation & testing

Development, configuration and integration. First in the lab, then in the maintenance window. Every change has a tested rollback plan.

  • FAT / SAT
  • Rollback plans
  • Operating documentation
  • Training
04ongoing

Operation & evolution

Monitoring, updates and regular reviews. Quarterly reports show what has improved and where risks remain.

  • Service levels
  • Patch management
  • Quarterly reports
  • Incident drills
NOG Contact · free first call

Let’s talk
about your
plant.

Tell us briefly what you are planning. We get back to you within two working days, on site if you prefer.

Start a project