WP Basic
- Vulnerability monitoring
- Vulnerability notification
- Mitigation Planning
- Threat Analysis and Risk Assessment
- HW/SW maintenance
- Security Update Management
OPERATE · ASSESS · MAINTAIN
— Positioning
We've got your back.
Cybersecurity, safety and compliance do not end when a product reaches the market. New vulnerabilities surface in the field, standards tighten, components slide into obsolescence, and the responsibility for all of it stays with the manufacturer.
We take on that part. Monitoring, incident response, independent assessments, update and maintenance management, set up so your engineering team can focus on the next generation of products rather than on what is already out in the field.
— Three areas
What we take on after launch.
Three service areas that work together: continuous monitoring, independent assessment and long-term maintenance.
Monitoring & incident management
Automated vulnerability monitoring and a structured PSIRT service: we spot security incidents early, assess them and coordinate the response.
Independent Assessment & Audits
Independent security and safety assessments to IEC 62443, ISO/SAE 21434, IEC 81001 and IEC 61508, giving you a solid attestation for approval, audits and customer requirements.
Maintenance & update management
HW/SW maintenance, security updates, obsolescence management and PKI operation, so that safety-related system parts stay available across the entire product lifecycle.
PSIRT / SLA · LIFECYCLE
Monitoring & Incident Management
Product Security Incident Response Service.
Our PSIRT service helps you respond to reported security incidents and vulnerabilities in your products in a structured and fast way, across the entire product lifecycle.
We handle monitoring, analysis and assessment, along with the coordination and communication of the right measures. That way you not only meet regulatory requirements, but also strengthen your customers’ trust in the security of your products.
- ✓Monitoring, analysis and assessment of reported incidents
- ✓Coordination and communication of the response
- ✓A range of SLAs, from basic monitoring to prioritised response
- ✓Meeting regulatory requirements (CRA, NIS2, IEC 62443)
— Cybersecurity packages
From basic to full service.
You choose the depth, we deliver the right package, or put together a custom one for your needs.
Work-PackageWP Basic
Work-PackageWP Monitoring & ReportingRecommended
Work-PackageWP Full-Service
Vulnerability monitoring
Vulnerability notification
Mitigation Planning
Threat Analysis and Risk Assessment
HW/SW maintenance
Security Update Management
WP Monitoring & Reporting
Recommended- Vulnerability monitoring
- Vulnerability notification
- Mitigation Planning
- Threat Analysis and Risk Assessment
- HW/SW maintenance
- Security Update Management
WP Full-Service
- Vulnerability monitoring
- Vulnerability notification
- Mitigation Planning
- Threat Analysis and Risk Assessment
- HW/SW maintenance
- Security Update Management
TESTAT / CRA · NOTIFIED-BODY
— Independent Assessment
Independent proof of security and compliance.
With requirements such as the Cyber Resilience Act or rules set by EU Notified Bodies, traceable security assessments are becoming ever more important. NewTec carries out structured assessments to international standards.
The result is a solid attestation: it serves as independent proof of a product’s technical security and supports approvals, customer requirements and audits.
- ✓IEC 62443: industrial cybersecurity
- ✓ISO/SAE 21434: automotive cybersecurity
- ✓IEC 81001: health software security
- ✓IEC 61508: functional safety
PKI / X.509 · ROOT-CA · OCSP
— PKI management & hosting
PKI management and hosting.
We offer a powerful toolchain for the central management of a product-related Public Key Infrastructure (PKI), built for the demands of industrial and connected products. You benefit from secure certificate management, digital device identity and encrypted communication, compliant with IEC 62443, EN 18031, CRA and NIS2. Our solution meets core requirements from current standards and laws. It helps you prove the authenticity, integrity and trustworthiness of your products in an audit-ready way, with no infrastructure or operating effort of your own.
With our offering you create the foundation for secure communication, software authenticity and regulatory compliance: ready to run, scalable and future-proof.
- ✓Provision and operation of a complete X.509 certificate infrastructure (Root CA, OCSP, CRL)
- ✓Certificate management toolchain for issuance, renewal and revocation
- ✓Multi-tenant solution, hosted in KRITIS-compliant data centres in Germany
- ✓Technical and organisational integration into OT and product environments
- ✓Optional: connection to IAM and security platforms (e.g. access control, signature verification)
ACADEMY / TRAININGS · WORKSHOPS
— NewTec Academy
Enable your teams!
Regulations such as the Cyber Resilience Act (CRA), NIS2 and IEC 62443 explicitly require proof of qualified staff. Sometimes the fastest lever is not a service package but targeted training, so your team keeps the topic in-house.
At NewTec Academy we bring our knowledge together in open and in-house formats: compact, hands-on and led by trainers who work on live projects.
- ✓Webinars and training on CRA, NIS2, IEC 62443 and the Secure Development Lifecycle
- ✓Tailored to development, product management or procurement
- ✓Training materials and checklists to work from
- ✓Documentation of all training measures, audit-proof towards authorities
Industries
Safe operation wherever you are.
Our industry experts are happy to help.
MDR · ISO 13485
Medical
From the first idea through product approvals to safe operation: we build complete medical device systems up to Class IIb under the MDR, or with worldwide approval.
Explore industry →
ISO 13849 · IEC 62443 · Machinery Regulation
Industrial
Safety and security for IoT and Industry 4.0: consulting, development and conformity support for connected machines, plants and devices.
Explore industry →
ISO 26262 · IEC 61508 · ISO/SAE 21434
Automotive
For over four decades we have built safe electronic systems for control units, driver assistance and connected vehicles. Standard-compliant to ISO 26262, ISO/SAE 21434 and ASPICE, from concept all the way to series.
Explore industry →
EN 50126 · EN 50129 · EN 50716
Railway
Development, services, and platforms for railway systems. Tailored solutions in accordance with EN 50126, EN 50129, and EN 50716.
Explore industry →
DO-178C · DO-254 · DO-160G
Avionic
Consulting, hardware and software development and assessments for safety-critical avionics systems, to DO-178C and DO-254.
Explore industry →
ISO 25119 · ISO 19014
Off-Highway
Functional safety, security and usability for off-highway machines to ISO 25119 and ISO 19014: consulting, development and conformity support for agricultural, construction, forestry and commercial vehicles.
Explore industry →— Knowledge
Background on standards and obligations.
Talk
Let’s talk about your operating model.
Tell us what tends to pile up for you post-launch, and we will propose the right service setup so your team gets its bandwidth back.