Clear processes and integrated tooling in line with the CRA

Vulnerability management for long-life products

The challenge

Innomotics develops electrical drive systems and large motors with long product life cycles. As the number of software components grew, reliably managing those components and their potential vulnerabilities became increasingly time-consuming. At the same time, IEC 62443 and the Cyber Resilience Act set high requirements for product security and compliance. Innomotics therefore needed a consistent, scalable approach with clear responsibilities, along with a tool that reliably supports this process.

Innomotics GmbH

Innomotics GmbH is a global provider of electrical drive systems and large motors. Its solutions are used in core industrial applications where reliability, long life cycles and cybersecurity are critical.

How we helped

Together with Innomotics, XITASO analyzed the existing workflows and used these insights to develop a practical approach to vulnerability management. Consulting and technical implementation went hand in hand. XITASO introduced OWASP Dependency-Track to consolidate SBOMs and vulnerability information in one central place. Thanks to the integration with Jira and existing development processes, the solution fits seamlessly into established ways of working. In parallel, XITASO simplified the processes for handling vulnerabilities and sharpened responsibilities and prioritization. The result is a vulnerability management approach that creates transparency, reduces manual effort and can be scaled to further products.