achelos security portfolio for critical infrastructures

Greater security in a networked world

achelos offers an innovative portfolio of products and solutions on the basis of the latest technologies and encryption methods. We have been active in the market as a manufacturer-independent software development house for more than ten years. achelos works on major projects both nationally and throughout Europe that focus on the security of personal, confidential and particularly sensitive data.

Our technical solutions range from conceptual design and specification, through development and integration, all the way up to testing in security-critical fields of application.

The achelos security offering at a glance

Security management

• IT security concept policy
• Definition of security requirements
• IT security architectures
• IT security organisation and processes
• Risk analyses
• Supporting CC evaluation and CC certification
• Audit-standard documentation

Special security technologies

• Public Key Infrastructure (PKI)
• Single Sign On (SSO)
• Smart cards
• Security token 

System and application security of

• smart cards and smart card terminals
• high security modules (HSM)
• mobile terminals
• web server infrastructures
• client/server systems

Consulting and security test suites for critical infrastructures

Together with partners, achelos offers customers from the critical infrastructure sector a full-scope service for implementation of the IT security compliance objectives, such as implementation as per ISO 27001, sector-specific IT security standards or general security requirements (based on recommendations from the Federal Office for Information Security (BSI)). In line with the German government's IT security legislation, this affects all sectors with supply relevance in which failures could lead to dramatic consequences for society at large, the economy and the state.

TLS and IKE/IPsec test suites from achelos

Flexible software tools deliver verifiable IT security

The TLS and IKE/IPsec test suites from achelos are used to check secure configuration and implementation of network connections.

Benefits of the TLS and IKE/IPsec test suites from achelos:

• Comprehensive testing of potential attack scenarios (considerable test depth)
• Thorough implementation of BSI requirements
  Cost savings thanks to faster certification
• High degree of automation
• Reproducible test results
• Significant reduction of test time and costs

Product versions

The test suites are available individually with the following testing tools:

• TLS Client Inspector
• TLS Server Inspector
• TLS Checklist Inspector
• IKE/IPsec Inspector

download brochure

Security and prevention as core competency

The services offered by achelos encompass drafting of test concepts for conformity tests with technical specifications and BSI guidelines, as well as preparation of evaluations and certifications to security standards, such as Common Criteria, PCI-DSS or FIPS.

Expert knowledge for a secure future

We help our customers implement legal and individual security requirements in stable, user-friendly and sustainable solutions. This starts with consulting, employing a great deal of expert knowledge, continues throughout our development activities with "Security by Design" and ends with the customer, who then benefits from flexible and high-performance solutions, the results of which flow into verifiable documentation. The achelos team comprises recognised experts in security technology that have implemented projects worldwide.

achelos reference projects

We have references in many areas, including the following:

• Electronic ID systems
• Electronic health cards
• Interoperability laboratory for all components of the telematics infrastructure in the German healthcare sector
• Digital tachograph (driver card, workshop card, control card, company card) 
• Subscription and connectivity management
• Bank cards with chip
• Security in electronic communication
• Public Key Infrastructures (make-or-buy consulting)
• Digital signatures

IT security tips

Questions for assessing IT security

• How is my IT system protected against internal and external threats?
• Is the level of IT security in line with the latest state of the art developments and the requirements of my business partners?
• Which security standards are currently in place and are they being met?
• How are the quality and security standards documented in a verifiable way?
• What risks and what kind of damage could potentially occur in my organisation as a result of inadequate IT security?