Grid operators, substations, smart meters, distributed energy
Energy and smart grids
The grid now takes orders from millions of devices it does not own.
A grid used to have a few hundred large plants run by people the operator knew. It now has millions of inverters, batteries, chargers and meters, updated by their makers over the internet. A wrong command or a bad firmware version, repeated across a fleet, can move enough power to unbalance a region. The operator needs to know what those devices run.
Who this is for
- Grid and distribution operators, responsible for stability
- Makers of inverters, chargers, meters and batteries, whose fleets act on the grid
- Aggregators and virtual power plants, who steer devices they do not own
- Substation automation vendors, under IEC 62443 and grid security rules
Where the problem shows
An inverter maker pushes firmware to a whole fleetThousands of megawatts change behaviour at once. The operator should be able to see which version each unit runs.
An aggregator sends a control signalThe device should know the signal comes from an approved controller, and the controller should know the device is genuine.
A smart meter is replaced or re-keyedBilling and switching depend on its identity. It should be enrolled with evidence.
A substation controller is maintainedIt should prove its state before it is trusted to switch again.
A flaw is found in a common componentThe question is how much capacity is exposed. The answer should come from attested versions.
What we deliver
- Device identity and attestation for grid-connected equipment, from factory to field.
- Mutual verification between controllers and devices before control signals are accepted.
- Fleet rules for firmware rollouts: staged, verified, and refused when a unit cannot prove the result.
- Evidence mapped to NIS2, the EU network code on cybersecurity for electricity, the Cyber Resilience Act and IEC 62443.
Questions worth answering
- How much generating capacity in your area runs one firmware version?
- Can a device tell a real control signal from a forged one?
- After a fleet update, which units did not take it?
Across the life cycle
DesignBuildMake or deployOperateUpdateRetire
The stage that decides here: update. One fleet update can move a region's power. Staged, verified updates matter more than any other stage. See attestation in the product life cycle.
Rules your buyers cite
EU network code on cybersecurity for electricityNIS2Cyber Resilience ActIEC 62443
Our work in this industry
Attested OT and industrial controlAttested devices
Go deeper
Working on energy and smart grids? A first call takes 30 minutes and commits you to nothing. Bring your product and the one question that worries you.
Next fixed date: EU Digital Identity Wallets are due in every member state on 24 December 2026, 42 days from now.