Skip to content Skip to footer

EXOR International Cybersecurity

Industrial cybersecurity
starts inside the machine

EXOR helps machine builders and system integrators design connected industrial technologies with secure devices, protected software environments and lifecycle-ready automation architectures.

BSP security
JMobile security
Secure development
Lifecycle readiness
Rectangle 4-1

Why it matters

Cybersecurity is becoming a design requirement

Industrial machines are no longer isolated assets. They are connected, updated, integrated with IT/OT networks and increasingly managed across their full operational life.

Generic placeholder image
Exposure reduction
Limit unnecessary services, ports, protocols, and attack surfaces during the earliest architecture decisions.
Generic placeholder image
Access Control
Manage users, roles, sessions, authentication and permissions across HMI, and device environments.
Generic placeholder image
Integrity protection
Support software authenticity, project protection, secure update packages, and data protection.
Generic placeholder image
Lifecycle management
Address vulnerability management, updates, documentation, and long-term support as part of the product lifecycle.

Why it matters

Cybersecurity is becoming a design requirement.

Industrial machines are no longer isolated assets. They are connected, updated, integrated with IT/OT networks and increasingly managed across their full operational life.

Generic placeholder image
Reduce exposure
Limit unnecessary services, ports, protocols and access points from the earliest architecture decisions.
Generic placeholder image
Control access
Manage users, roles, sessions, authentication and permissions across HMI and device environments.
Generic placeholder image
Protect integrity
Support software authenticity, project protection, secure update packages and data protection.
Generic placeholder image
Manage lifecycle
Address vulnerability handling, updates, documentation and long-term support as part of the product lifecycle.

Exor approach

Secure industrial technology, from hardware to software

EXOR integrates cybersecurity principles into industrial devices and software environments to help OEMs build secure machine architectures that are more secure, maintainable, and ready for evolving market expectations.

encryption--02 1

Secure device
foundation

Hardware, BSP,  and system settings designed to reduce exposure, protect access,  and support long-term product lifecycle management.

endpoint--protection 1

Protected software
environment

JMobile security features for user governance, auditability, project protection, secure protocols, and critical operation traceability.

continuous--security 1

Lifecycle-oriented
security

Secure development, security update management, vulnerability handling, and documentation as part of the product journey.

Key capabilities

Cybersecurity capabilities across EXOR technologies

A practical set of functions that supports secure machine design, controlled operation, and cybersecurity-oriented lifecycle management.


  1. Secure configuration by default
    Security-oriented device settings, controlled services, and reduced exposure of unnecessary functions such as diagnostic services when not required.
  2. Attack surface reduction
    Firewall, NAT, port forwarding, whitelisting, and blacklisting features to help control traffic and reduce unnecessary access points.
  3. User and role management
    Granular permissions, user groups, password policies, session control, and runtime user management in HMI and software environments.
  4. LDAP and enterprise authentication
    Support for hybrid models with local and online users, connecting OT user roles with IT authentication infrastructures.
  5. User and role management
    Traceability of HMI operations such as tag writes, recipe management, alarm acknowledgements, login events, and critical parameter changes.
  6. Data integrity and protection
    Project signing, project encryption, signed update packages, and controls to protect software artifacts during distribution and execution.
  7. Secure boot and data protection
    Secure boot, signed applications, and encrypted data partitions for selected platforms and architecture classes.
  8. Secure communication protocols
    Support for HTTPS, FTPS, TLS, OPC UA security mechanisms, MQTT security, and protected data exchange.

Technology layers

A cybersecurity view of the EXOR technology stack

touch--screen (1) 1

Hardware

HMI, gateways, edge devices, and mobile HMI platforms.

badge 1

BSB

Firewall, certificates, users, roles, browser settings, and network services.

network--protection (1) 1

JMOBILE

HMI security, audit trail, LDAP, project protection, and secure protocols.

continuous--security 1-1

Lifecycle

Security updates, vulnerability handling, and long-term support.

reference-architecture 1

Architecture

Secure machine design for connected and service-ready equipment.

Standards, certificates and readiness

Competence is built through process, certification and continuous improvement

EXOR’s cybersecurity strategy is shaped by internationally recognized frameworks, secure development practices, and ongoing readiness activities for the evolving cybersecurity landscape.

  • ISA/IEC 62443-4-1
    Secure development lifecycle process for industrial automation and control systems.
  • ISA/IEC 62443-4-2
    Technical security requirements roadmap for industrial components, embedded devices, and software applications.
  • BS EN 18031-1
    Cybersecurity reference for radio-enabled products in the context of RED-DA conformity.
  • Lifecycle & disclosure
    Product lifecycle statement, vulnerability disclosure policy, and security update management.
  • CRA, NIS2, Machinery Regulation
    Readiness activities addressing product security, documentation, vulnerability management, supply chain, and machine safety expectations.

Use cases

Where cybersecurity becomes part of machine design

The value of EXOR cybersecurity capabilities becomes visible when OEMs need to deliver connected, service-ready, and lifecycle-managed machines.

connected--ecosystem 1

Connected OEM machines

Secure HMI and edge architectures for machines connected to customer networks or cloud services.

virtual 1

Radio-enabled
products

Product architectures that consider cybersecurity requirements connected to wireless communication.

active--server 1

Remote support-ready equipment

Devices and software prepared for controlled access,traceability, and secure communication.

application--security 1

Secure HMI applications

User permissions, audit trail, project protection, and secure data exchange at operator interface level.

Prova JMobile ora

Scarica la suite JMobile completa e i materiali di supporto.

EXOR + CORVINA

Extend cybersecurity from the device to the connected asset

Secure industrial devices are only the starting point. When machines become connected, cybersecurity must extend to remote access, user governance, software updates, documentation, and fleet lifecycle management.

Testo img dark

Documents, certificates and resources

A scalable area for cybersecurity documentation

Use this section as a future-ready resource center for certificates, policies, technical notes, security guidelines, webinar recordings, and customer-facing documents.

ISA/IEC 62443-4-1

Certificate

Vulnerability Disclosure Policy

Policy

Secure Configuration Guidelines

Guide

BSP Security Features

Technical note

JMobile Security Features

User manual

FAQ

Everything you should know

EXOR | JMOBILE

Build cybersecurity into the HMI software layer

Cybersecurity is not only about securing hardware. JMobile helps machine builders develop and manage HMI applications with security in mind, supporting controlled access, secure communication, software maintenance, and the long-term management of connected machine interfaces.

Build cybersecurity into your machine architecture

Start from secure industrial technology, then extend protection across remote access, updates, documentation and connected lifecycle operations.

EXOR + CORVINA

Extend cybersecurity from the device to the connected asset

Secure industrial devices are only the starting point. When machines become connected, cybersecurity must extend to remote access, user governance, software updates, documentation and fleet lifecycle management.

Testo img dark

Services

Make or buy
Embedded Design
Digital Assessment