Modern buildings are networks. Access control, BMS, smart meters, HVAC, elevators and fire safety systems are all connected — and almost none were designed with security as a primary requirement. A breach can mean unauthorised physical access, disabled safety systems, or a foothold into corporate infrastructure.
Embedded systems with no update path
An access panel installed in 2015 likely runs its original software. Vendor contracts may even prohibit firmware modification.
Nobody fully owns the security
A smart meter can be owned by a utility, managed by a contractor and located in a third party’s building — with no single responsible party.
Building devices are stepping stones
Connected to corporate IT for monitoring and reporting, a compromised building device reaches far beyond the building itself.
Device-level protection — without disrupting operations
No modification to existing devices
Locks install externally. The access controller, BMS gateway or meter operates exactly as before — no vendor re-certification, no maintenance window.
Precise access control for multi-party environments
Facilities managers, contractors, utilities and tenants each get access scoped to exactly their devices — expiring automatically.
Secure connectivity across portfolios
Central monitoring of dozens or hundreds of buildings over any network, including cellular — without VPN tunnels or building-to-building interconnects.
Protocol-agnostic by design
BACnet/IP, Modbus TCP, KNX IP and other building protocols work transparently — Locks operate at the IP layer.
Entry & access control systems
Card readers, locks and controllers hold credential data and control physical access — invisible to scanning, open to authorised management.
Building management systems
BMS compromise affects occupant safety and energy costs. Contractors connect through audited, time-limited sessions.
Smart meters & energy monitoring
At the boundary between building and utility networks, XoT enforces device-level policy regardless of where a connection originates.
Elevators, fire safety & charging
Specialist-maintained systems with strict certification rules get external protection and time-limited maintenance access.
NIS2 extends obligations to district heating, cooling and certain facility operations. The EU Cyber Resilience Act affects smart meters, access control and BMS gateways from 2027 — XoT is built under an SDL with SBOM transparency to support both sides.
See your assets disappear
Book a live demo and watch a Lock go from unboxing to enforced policy in minutes.
Book a demo