Hardware-rooted trust · NIS2-ready

Unforgeable cryptographic proof for critical infrastructure.

SilicoTrust anchors the identity and integrity of every device in silicon — so every command, every sensor reading and every record is cryptographically provable. To your auditor. To the regulator. To a court.

€10MMax NIS2 fine per company
24hIncident notification deadline
DirectorsLiability of management

Built with the world's most trusted platforms

IBMRED HATINTEL
The problem

Your infrastructure generates facts. You just can't prove them.

01

Paper compliance is not compliance

A policy PDF proves intention, not integrity. NIS2 demands demonstrable technical measures — and after a breach, 'we had a procedure' is not a defense.

02

One blind device is enough

A single spoofed sensor or impersonated RTU can open circuit breakers, stop production lines or falsify safety records — from a device your systems believed was legitimate.

03

You can't prove what happened

After an incident, 'we think it was the PLC' is not an answer regulators, insurers or judges accept. Without cryptographic evidence, every incident becomes your word against the event log — which may itself be compromised.

What this means for your business

From security promises to cryptographic evidence.

Outcome

Compliance you can prove

NIS2 Art. 21 measures backed by cryptographic evidence — not declarations. Audit-ready, regulator-ready.

Outcome

Incident answers in hours

What executed, on which device, under whose authority — established from silicon-level evidence within the 24-hour notification window.

Outcome

Directors' liability, covered

Demonstrable due diligence for your board, your D&O insurer and the authorities — management accountability is explicit in NIS2.

Outcome

Leverage with insurers & clients

A verifiable security posture strengthens cyber-insurance negotiations and answers the security questionnaires your biggest clients already send you.

The programme

From uncertain to provable — in three phases.

Fixed scope, fixed price, fixed timeline. You always know what you are paying for and what you receive.

Phase 1 — NIS2 Readiness Assessment

3 weeks · signed report for your board

Entity classification and exact obligations · gap analysis against the 10 Art. 21 measures · supply-chain assessment · incident-notification readiness (24h/72h/1 month) · prioritised remediation roadmap with sanction exposure per point.

€6,500fixed · one-time

Phase 2 — Remediation & Evidence Layer

4–10 weeks · from Phase 1 roadmap

Implementation of prioritised controls plus incident-response tabletop exercise. The differentiator: our hardware-anchored cryptographic evidence layer — compliance becomes verifiable proof, not paperwork. Deliverable: operational controls + audit-ready evidence pack.

from €18,000scoped to findings

Phase 3 — Continuous Compliance

Monthly · 12-month term

Evidence maintained and monitored · regulatory watch as transposition evolves · audit and CSIRT liaison support · incident-response SLA.

€1,900/morecurring

Not sure NIS2 applies to you? The first step is a 30-minute call — we will tell you plainly whether it does and what it requires. No cost, no commitment.

How it works

Identity. Proof. Decision.

Identify

Every device receives an unforgeable identity injected in silicon during manufacturing (SilicoPassport™) — not assigned by software that can be copied or spoofed.

Prove

Continuous attestation (SilicoProof™) generates cryptographic proofs that firmware and execution state remain unaltered — verified without exposing secrets.

Decide

The SilicoTrust API™ gates physical commands in real time, and the Trust Score™ ranks every asset's operational reputation — anomalies surface fleet-wide.

Technical detail — for your engineering team
The five pillars

Five pillars of enterprise device integrity.

A unified, defense-in-depth framework built to verify every device, secure remote data feeds, and stop unauthorised physical control.

01 · Root of Trust

SilicoPassport™

Immutable hardware-bound cryptographic identity. The digital DNA of every physical device — ECDSA P-256 inside a secure element, with PUF binding.

02 · Zero-Knowledge Proofs

SilicoProof™

Continuous state integrity and remote attestation. zk-proofs generated on the edge validate execution without exposing secrets.

03 · Verification Gateway

SilicoTrust API™

Millisecond decision engine over mTLS. Real-time response to physical manipulation threats — one POST per decision.

04 · Reputation Engine

SilicoTrust Score™

Hardware-based operational reputation — a single quantifiable metric for the health and security of each physical asset.

05 · Collective Intelligence

Global Trust Graph™

Global mapping of collective behaviour for large-scale anomaly detection across industrial fleets — patterns invisible at the individual device level.

Compliance

Aligned, not declared

Architecture aligned with NIS2 Art. 21, IEC 62443-4-2 (up to SL 4) and ISO/IEC 27001 — engineered to make audits cheaper, not longer.

Developer ecosystem

Seamless integration with existing pipelines.

Deploy chip-level security with a single call. The production-ready SDK handles hardware cryptography silently — native ARM TrustZone and Intel SGX support, webhooks for critical physical security events, real-time fleet dashboard.

POST /v1/attest
const trustResult = await silico.attest({
  deviceId: "edge_sensor_v4",
  signature: "hw_signed_blob_0x442...",
  expectedState: "FW_V2.1.0"
});

// Response: 200 OK
{
  "attested": true,
  "proof": "ZKP_7782_VERIFIED",
  "trust_score": 0.998
}
Where it runs

Built for private operators who answer to boards — not tenders.

▣

Banking & Financial Services

Provable integrity for core-banking and payment infrastructure. Every transaction and configuration change anchored to hardware evidence — engineered for Red Hat OpenShift and hybrid cloud, ready for DORA-grade audit.

◈

Fashion & Luxury

Counterfeiting costs the EU clothing industry €12 billion a year (EUIPO). Give every garment a hardware-anchored identity — authenticity provable from factory to shelf, grey-market diversion visible, returns verified in seconds.

◍

Food & Beverage

Cold-chain and provenance data that regulators and retail buyers can verify — not trust. A single tampered sensor reading becomes provable evidence within the 24-hour NIS2 notification window.

▤

Logistics & Supply Chain

Custody of goods, provable. Seal integrity, route deviations and handling events attested at hardware level — carrier disputes settled with cryptographic evidence, not testimony.

⚙

Industrial & Manufacturing

Cryptographic proof that commands executed by robots and OT systems originate from authorised, unmanipulated code — production-line forensics in hours, not weeks.

⚡

Energy & Utilities

Validate field measurement data at the source and control who — or what — can issue physical commands. For grid, water and waste operators, public and private.

Your machines already know the truth. We make them say it.

Thirty minutes. We will tell you plainly whether NIS2 applies to your company, what it requires, and what demonstrable compliance would look like on your infrastructure.

Book the briefing — silicotrust@cyberix.uk