Skip to content
KlaarSecurity
IT/OT security · NIS2 · DACH & Benelux

Secure your plant.
Meet NIS2.
Keep production running.

We secure the systems that run your operations: control systems, networks and remote access. Hands-on, vendor-neutral, without stopping the line.

Try the live demoBook a call
Lagebild · liveSimulated plant
L4 EnterpriseL3 OperationsL1–2 Control & field

The plan shows three events, one after the other:

  1. Spotted · PLC Filling: Unplanned write from an office laptop. Handled: session paused, team informed, NIS2 note ready.
  2. Spotted · Control room: Vendor login outside the maintenance window. Handled: access held until the shift lead approves.
  3. Spotted · Boiler controller: New device talking to the boiler. Handled: blocked by firewall rule, ticket opened.
Open the live demo →
NIS2 in Germany
~29,500 companies in scope
NIS2UmsuCG · in force since 6 Dec 2025
BSI registration deadline passed (31 Jul 2026). Management is personally liable.
For operators in
  • Energy
  • Water
  • Chemicals
  • Manufacturing
  • Logistics

Sound familiar?

01

“We don’t know what’s in our plant.”

No clear inventory of controllers, networks and remote connections, so no way to assess the risk.

02

“IT and OT don’t speak the same language.”

IT security doesn’t know the plant. Plant engineers don’t know modern security. NIS2 needs both.

03

“We bought a tool. Nobody runs it.”

The license is paid, but rollout, tuning and daily operation never happened.

The bridge

We connect what you already have.

Your OT tools see the plant. Your IT tools run the company. Klaar turns their signals into actions, and every action into NIS2 proof. No rip and replace.

Services

From gap analysis to secure operations.

Step 1 · usually 2–4 weeks

NIS2 OT Check

Where you stand on NIS2: a gap list, risks ranked by impact, a 12-month roadmap.

Price on request
What’s included →How we build rules →
Step 2 · Project

Implementation

Close the gaps without stopping the line: segmentation, remote access, monitoring, backup.

Price on request
What’s included →
Step 3 · Ongoing

Managed OT Security

Lagebild run by us, with your team: every alarm assessed, NIS2 reports drafted on time.

Price on request
What’s included →
Aligned with
  • NIS2
  • IEC 62443
  • ISO 27001
  • KRITIS-Dachgesetz
  • ISG (CH)
  • Cyber Resilience Act
Klaar Lagebild

Not another dashboard. From signal to action.

Dashboards show you problems. Lagebild closes the loop: it senses what happens in your plant, makes sense of it, drives the response and proves what was done. One shop floor map shows every asset and where the incident is.

  1. Sense
    Collect signals from what you already run: SCADA, historians, OT monitoring, firewalls, remote access, backups. Read-only, at a low agreed rate. We never hammer your operational systems.
  2. Correlate
    Add plant context: asset criticality, maintenance windows, shifts, vendor access. Noise drops, real incidents surface.
  3. Act
    Every case gets one next step, an owner and a playbook. NIS2 reports are drafted for you to check and submit.
  4. Audit
    Every signal, decision and action is logged. NIS2 evidence for the BSI (or BACS in Switzerland) and your board, built in.

Built on your existing tools and proven open source. No lock-in. Runs in a German/EU cloud or on-prem, air-gapped if needed.

Try the live demo
CriticalIn progressNIS2 96 · significant◷ Early warning · 21:43:10 leftIllustrative
Vendor login outside the maintenance window
Vendor account vendor-remote logged in over VPN at 03:02, then connected to controller A
First seen 09/10/2026, 03:02:14 · Controller A, VPN gateway
Assessdone
Containnow
Reportto do
Closeto do
Who owns it, and the playbook: the steps to stop it and get back to normal. Every tick is recorded.
Owner: Anna Weber · OT engineer
Playbook · 2 of 4 done
Confirm (15 min): call the vendor’s contact. Is this their engineer, and why now?
Vendor acted: “Not ours, nobody was scheduled.”
Contain (30 min): end the session and disable the vendor account.
Check what was touched (2 h): controllers, HMIs and engineering files.
OT engineer acts: Anna Weber · asked
Inform the CISO: a supplier is part of the incident.
Informed: Jeroen Vos · CISO
Audit trail
  1. 03:02:14#4637 · eb8c63d2
    Incident opened · Lagebild (correlation)
  2. 03:02:14#4638 · 803a3d30
    NIS2 decision: Yes, significant · Rule book
  3. 03:04:51#4641 · e1c91ae8
    Assigned to Anna Weber · Lena Meyer
  4. 03:11:02#4644 · 3b0c598d
    Answered: not ours, nobody was scheduled · Vendor
  5. 03:12:40#4645 · 9f0509b8
    Step 2 of R-006 done · Anna Weber

How we work: security without downtime.

  1. See

    Passive inventory of assets and connections. Nothing touches live control.

  2. Prioritize

    Rank risks by impact on safety and uptime, not by checklist order.

  3. Fix

    Implement in your maintenance windows, together with your plant team.

  4. Prove

    Audit-ready documentation for the BSI or BACS and your management board.

Why us

We implement. We don’t just write reports.

IT and OT in one team

15+ years delivering cloud, data and industrial IoT for enterprise and industry.

Vendor-neutral

We pick the tool that fits your plant, not the one with the best margin.

Senior experts, every project

From a single plant to multi-site groups. Senior people on every project, a clear quote up front, no army of juniors.

Close by, Europe-wide

Made in the Ahr Valley, south of Bonn; on site across Germany, Switzerland, Austria and Benelux. We work in German, Dutch and English.

Tools of the trade

Vendor-neutral. That is how we work.

Everything Lagebild connects to →

Works with what you already run

Open source we build on

Where does your plant stand on NIS2?

30-minute call, free. You leave with your three biggest gaps.

Book a free call
hello@klaarsec.eu