Secure Cloud · PKI device platform

Critical devices in the field — but who may do what?
And who approved it?

Secure Cloud manages your device fleet without a single password: identity is a certificate, every action is signed, every critical approval comes from a named human — provable, even offline.

The problem

Remote maintenance works — on a basis of trust

Shared credentials

VPN plus a shared password: access works, but nobody can say who accessed. Personal accountability? None.

Gaps in the evidence

Logs can be edited. When it matters, “some admin did it” stands against the auditor's demand for proof.

Unsecured updates

Firmware travels to the device via USB stick or an open file server — without an end-to-end chain of trust from release to field.

The solution

Certificates instead of passwords — approvals instead of hope

1 · Identity is a certificate

Permissions travel inside the X.509 certificate, not in a bypassable database. Onboarding: one QR code, four words. Offboarding: one click, access dead.

2 · Approval is a human

Critical actions are confirmed by a named human, biometrically on their own device — the four-eyes principle built in, with no password sharing.

3 · The signature counts, not the channel

Commands and firmware are signed and hash-pinned. The transport is up to you — QR code, file, no connectivity at all: the workflow also runs offline.

Ruled out by design

Proof instead of log files

0passwords in the entire system
100%of database rows signed — the server refuses to start if tampered with
3PKI tiers: root offline, CA keys never touch the internet
100%Rust, unsafe forbidden

Operated in an ISO 27001 certified data center, one isolated instance per customer, provisioned in minutes. Implementation partner: NewTec.

From the field

Manufactured offshore — sovereignty stays with the manufacturer

A manufacturer produces in the Far East. Every device receives its certificate — but only the manufacturer can sign, not the contract manufacturer. The result: real-time production counts, grey-market devices without value, and control over the fleet stays where it belongs.

“No ‘some admin did it’, but proof instead of log files — every row of the history carries a signature.”

Next step

How many passwords protect your fleet today?

In the fleet assessment we look at your devices, access paths and update channels together — and show what a password-free chain of trust looks like for your case. Answer within one business day.