Robert-Bosch-Straße 7
DE 64293 Darmstadt
Product range

Security Portfolio - Modular Product & Communication Security

 Protect Your Digital Assets - with Next-Generation Security

The increased complexity of embedded systems provokes many security problems. Already a single compromised embedded system poses a significant threat: a cyber attacker can use it to steal valuable IP, perform ransomware attacks, use it as part of a bot net or for an act of sabotage, all potentially causing high financial losses. Politics acknowledges this high risk and has introduced new and far-reaching regulations like the EU Cyber Resilience Act make cybersecurity a key factor of product development and maintenance.

The SANCTUARY security portfolio is a unique set of software security solutions that can be flexibly combined to protect your embedded products.

Platform Integrity Verification

  • Integrity verification of complete software stack
  • Verification of applications’ configuration
  • Integrity checks from remote parties
  • SBOM generation for the complete software stack

Cryptographic Services

  • Analysis and Consulting
  • Integration of:
  •    (Virtual) HSM (PKCS#11)
  •    (Virtual) TPM (TPM2.0)
  •    Crypto accelerators

Public Key Infrastructures

  • Designed & developed for extreme conditions, e.g., satellite missions
  • Quantum-ready hybrid crypto
  • Epidemic revocation information spreading, no direct contact necessary

Run-time Protection

  • Run-time isolation of applications
  • Trusted Computing, e.g., Arm TrustZone
  • Application hardening and testing (static & fuzzing)

System Health Monitoring

  • Supervise application behavior at run time
  • Detect liveness & security state of applications
  • Secure information and execution logging

Strong Application Isolation

  • Isolating applications with hardware-based security
  • Partitioning of system resources
  • Preventing unintended inter-application influences

Consulting & Customization

At SANCTUARY, we offer a dynamic range of cybersecurity solutions tailored to your needs. Our process begins with a comprehensive analysis of your software architecture to identify potential attack surfaces. Understanding the importance of regulatory compliance, we align our strategy with standards such as IEC 62443, NIS2, and the forthcoming EU Cyber Resilience Act to enhance your security posture.

Based on our comprehensive analysis, we propose a customized security design. Our expert team implements this design using our modular security services, which can be seamlessly integrated into your existing systems. Whether you need a full security overhaul or integration of specific security features, SANCTUARY is here to fortify your infrastructure and products.

Company profile

SANCTUARY Systems GmbH is an innovation-driven company with broad expertise in cybersecurity, marked by its robust research foundations. SANCTUARY Systems’ core mission is centered on seamlessly integrating pioneering research into industry-leading products. As a spin-off from the System Security Lab of Technical University of Darmstadt, SANCTUARY Systems has tremendous experience in innovative solutions in the area of system security.

We have profound experience with the following security topics & technologies:

  • Trusted Platform Modules (TPM)
  • Post-quantum Cryptography (PQC)
  • Trusted/Confidential Computing
  • Anomaly Detection Methods
  • Public Key Infrastructures (PKI)
  • ·Supply Chain Security
  • OS Hardening & SELinux
  • Virtualization-based Security Architectures

SANCTUARY Systems is an established supplier to the European Space Agency (ESA) providing their expertise in the development of cybersecurity solutions for satellites. In past projects SANCTUARY Systems, e.g., implemented a security subsystem which offers Trusted Platform Module (TPM) services to other subsystems on the platform, designed an end-to-end supply chain security architecture for space enterprises, designed a Public-Key Infrastructure (PKI) for large satellite constellation, or developed an automated anomaly detection and recovery system targeting satellite subsystems.

For more information on our ongoing projects in the space and defense domain please visit our website:

SANCTUARY Systems Blog

×