Brunotec GmbH · Berlin

Cybersecurity and functional safety for industrial systems and connected products.

We set up information security management systems, guide companies through CRA, NIS2, DORA and IEC 62443, test plants and products for vulnerabilities and develop secure software.

Our services Get in touch

Location: Berlin, Germany
Focus: OT and industrial control systems, connected products, regulated companies
Standards: IEC 62443 · ISO/IEC 27001 · ISO/SAE 21434 · ISO 26262 · IEC 61508 · CRA · NIS2 · DORA

Illustration: enterprise IT and OT production systems connected through a firewall, with AI test agents probing web, remote access and OT protocol connections — IT and OT connected through zones and conduits, tested with AI-assisted penetration testing

01 What we do

Our starting point is the information security management system according to ISO/IEC 27001. It ties together risks, controls, operations and the responsibility of management. On this basis we implement NIS2 and DORA.

For plants and products we go deeper into the technology: IEC 62443 for automation systems, ISO/SAE 21434 for connected vehicles and products, ISO 26262 and IEC 61508 for functional safety. We pay particular attention to the points where safety and security affect each other.

02 Services

All services in detail

Governance and compliance

CRAProduct classification, risk assessment, vulnerability handling and conformity assessment for products with digital elements. ISMSSet up, operate and prepare for certification according to ISO/IEC 27001. NIS2Classification, risk management, reporting processes and evidence for important and essential entities. DORAICT risk management, incident reporting, resilience testing and third-party risk for financial companies.

Industrial and product security

IEC 62443Secure development, system architecture and operation of industrial automation. Risk managementThreat analysis and risk assessment for OT, IT and products, with reporting for management. Penetration testingTests of OT networks, PLCs, SCADA, IIoT devices and remote access, without disrupting production.

Safety and security

Functional safetyThe ISO 26262 safety lifecycle, from hazard analysis to the safety case. Safety-security interfaceHazard analysis and threat modelling combined, so that safety goals also hold under attack.

Software

Software developmentSoftware developed along a secure development lifecycle based on IEC 62443-4-1.

03 Industries

Most of our clients operate systems that control physical processes or are subject to strict regulation.

04 Partners

All partners

Technology partners

We advise on security products from our partners, sell the licences and help with installation.

Cooperations

With these companies we develop solutions together and work on joint projects.

05 Company

About Brunotec and the team

Our goal: cybersecurity becomes a core engineering capability for our clients, so that their systems stay secure and safe from the first design to operation.