Service your machines anywhere. Open nothing.
A DIN-rail gateway that gives your engineers one encrypted, auditable way into a deployed machine — while the customer's network stays sealed. Built for the EU Cyber Resilience Act.
One box between the machine and the outside world.
It clips onto the DIN rail inside the control cabinet and takes two network connections — one to the machine, one to the plant uplink. From there it does three things.
Dials out, never in
The gateway opens an encrypted tunnel outward to your portal and holds it. Your engineers connect through that tunnel, per person, per machine, per time window — every session logged. The customer's firewall stays closed.
Speaks the shop floor
Modbus, OPC-UA, PROFINET and MQTT in; clean data out to your dashboards and maintenance systems — without exposing the controllers themselves to the network.
Stays patched for life
Signed firmware, remote updates and a documented vulnerability process over the product's lifetime. That continuity is the part of the CRA a one-off purchase cannot give you.
Cybersecurity stopped being optional. It became a condition of sale.
The Cyber Resilience Act applies to every product with digital elements placed on the EU market. Most mid-sized machine builders have no answer yet — and the answer is easier to buy as a component than to build as a project.
- In force
- NIS2 — operators of essential services must secure their OT networks.
- Since 11 Sep 2026
- CRA reporting obligations apply: actively exploited vulnerabilities and severe incidents must be notified.
- 11 Dec 2027
- CRA fully binding — secure-by-design, SBOM and lifecycle vulnerability handling required.
Vallum Gate VG-1
Design intent for the first unit. Specifications are being finalised with our manufacturing partner.
| Form factor | Fanless metal housing, DIN-rail mount |
|---|---|
| Power | 24 V DC industrial supply |
| Operating range | -20 to +60 °C |
| Interfaces | 2× Ethernet — segregated OT / IT ports |
| Protocols | Modbus TCP · OPC-UA · PROFINET · MQTT |
| Secure access | Outbound tunnel only — no inbound ports opened |
| Firmware | Hardened Linux · signed · remotely updatable |
| Management | Central portal — devices, access control, audit log |
| Connectivity | Wired at launch · cellular option on the roadmap |
Built by a security engineer
Hardened from the firmware up, not retrofitted onto a generic gateway. The software is where the value sits, and it stays in-house.
Assembled in Tunisia, duty-free to the EU
Under the EU–Tunisia association agreement: competitive cost, short lead times to Europe, no customs duty on entry to the single market.
Priced for the Mittelstand
Hardware plus a fair maintenance plan, at a figure a mid-sized builder can roll into every unit it ships.
Stated honestly.
Vallum Gate is engineered against the frameworks below. These are targets and work in progress — not certifications already held.
Looking for pilot partners.
If you build machines and your customers are starting to ask how you will meet the CRA, we would like to talk — early pilots shape what the first unit becomes.
hello@vallumgate.com