Operations and support centres
You hold the keys to your customers
You manage access control, refrigeration, cameras, building systems, lifts and other equipment remotely. That makes you fast when something goes wrong. It also makes you a way in to all your customers. XoT makes remote service secure.
The threat
A breach at your end is a breach at every customer
An attacker who gets into your systems can reach all your customers at once. One leaked password or one shared account is enough.
In autumn 2026, attackers took over refrigeration systems in hundreds of European supermarkets. The systems were managed remotely, and many could be reached directly from the internet. The same risk applies to all equipment that someone manages remotely.
Access control
Someone can open doors for the wrong people.
Refrigeration
Goods can be ruined in one night.
Cameras and alarms
Someone can watch or switch off the alarm.
Building systems
Someone can switch off heating, ventilation and air conditioning.
Lifts and escalators
People can be stranded or trapped.
Chargers and energy
Charging and power supply can be disrupted.
The situation in an operations centre
Many ways in, and few who see them
One tool per manufacturer
Each system often has its own remote access tool. On top of that come a VPN per customer, open ports and 4G routers.
Shared accounts
Several technicians share a login. You then cannot see who did what.
Subcontractors
Subcontractors get logins from you. Often no one knows how many have them.
Staff who leave
Access remains when someone leaves, unless someone removes it.
Around the clock
The way in is always open, because you must be able to respond at any time.
Customers with requirements
Customers want to know how you reach their equipment, and they want to see logs.
How XoT helps
Secure remote service for every customer
| Problem | What XoT does |
|---|---|
| Many tools and ways in | One way of working for all customers and sites. XoT works with the equipment already in place. |
| Open ports at the customer | No ports are opened. The connection goes out of the customer's network, also over the mobile network. |
| Shared accounts | Every technician has their own login, with a certificate, a smart card or your directory service, such as Microsoft Entra ID. |
| Subcontractors | Subcontractors get their own logins. You decide what they reach and for how long. |
| Access to too much | The technician reaches only the right device for a set time. |
| The customer wants to approve | The customer can approve each request before the connection opens. |
| Staff who leave | You close the access, and it stops working immediately. |
| The customer wants logs | The XMS logs who connected, to what, when and for how long. The logs can be sent to a SIEM. |
| Old equipment | The Lock makes the equipment invisible to unauthorised users, even when it gets no updates. |
You and your customers
One XMS for many customers
The XMS is the server that holds the rules and the logs. One XMS can manage many customers and keep them fully separate. Each customer sees only its own equipment and approves its own requests.
You can also divide the work by geography or by type of equipment. One team can, for example, manage access control in one region, and another refrigeration across the country.
You run the XMS
You run the XMS yourselves or with a hosting partner. Each customer gets its own rules and logs.
The customer runs the XMS
The customer runs the XMS and gives your technicians access. You work the same way at every customer.
Requirements coming your way
Your customers set requirements for you
| Requirement | What it means for you |
|---|---|
| NIS2 | Customers in scope must set security requirements for their suppliers. Those requirements end up with you. |
| CER, the Critical Entities Resilience Directive | Most EU countries already apply it. Essential services get resilience requirements, and remote access to their systems is part of that. |
| Insurance | More and more insurers ask how you protect access to your customers. |
| Contracts | Customers want to write down who has access, how it is approved and how incidents are reported. |
This is our reading of the rules, not legal advice.
Brochure
You hold the keys to your customers
Our brochure for operations and support centres has a checklist of eight habits. It also has your customers' most common questions, with examples of good answers. In addition, it shows how to divide responsibility and what to do if a way in has been misused.
Partner
Offer secure remote service as a service
Operations and support centres that use XoT become Xertified partners. You can offer your customers secure remote service as part of your contract. You provide first-line support to customers, and we provide second and third line.
Common questions
Do customers have to replace their equipment?
No. The Lock sits in front of the equipment. The equipment keeps its addresses and settings.
Does the customer have to open anything in the firewall?
No. The Lock connects out of the customer's network. No inbound ports are opened.
Can we have many customers in the same XMS?
Yes. One XMS can keep many customers fully separate. Each customer sees only its own equipment.
Does it work at sites with mobile broadband?
Yes. The Lock can run in a Teltonika router and connect over the mobile network.
How do we close access when someone leaves?
You remove the permission in the XMS. It stops working immediately. If you use Microsoft Entra ID, you can manage permissions with groups there.
What happens if the XMS cannot be reached?
The Locks keep enforcing the rules. The equipment is still protected.
Start with one customer
Choose the customer whose equipment worries you most. We help you set up secure remote service there first.