
IT security check
IT security check: recognize vulnerabilities, prevent attacks
Cyber attacks, data leaks, compliance breaches - IT security risks are omnipresent. They not only threaten your company data, but also your reputation and economic stability. But where are your company's individual vulnerabilities and IT security risks? The IT security check from MaibornWolff gives you the answer.
Our security experts analyze your IT systems, networks and applications for potential risks. We not only check whether your protective measures are up to current threats, but also support you in deriving security measures from legal requirements. Rely on sustainable IT security - with our IT security check, which uncovers risks and strengthens your defenses in the long term.
IT security check from MaibornWolff: Your benefits
Implementation at the right pace
We offer customized solutions that are established at a pace that suits the customer.
People-centered approach
People are at the center of all our technological and strategic considerations.
Holistic security strategy
We optimize your IT security not only from a technical perspective, but also from a strategic one.
Extensive expertise
With around 1,000 employees from various specialist areas, we have a wide range of experts at our disposal.

Crucial to the success of the project: the team did not try to bring security into the development teams from outside in a 'police role'. Instead, it empowered our teams themselves to systematically assess security.
Our references & projects
A reference is worth more than 1,000 words. Fortunately, we have dozens of them. Click through a selection of our most exciting projects and see for yourself!
-
MAN: Efficient threat analysis for control unitsLearn more
Digitalization increases cyber risks - especially for MAN's new CM4 control unit. Our experts use the 4×6 methodology and ThreatSea to identify threats at an early stage and develop targeted protective measures. Find out how MAN uses intelligent risk analysis to strengthen the security of its vehicles.
MAN: Efficient threat analysis for control unitsLearn more7 monthsProject duration
Over 20 workshopsThreat analyses
Over 500Potential risks evaluated
-
Siemens: AI demand prediction platform for industrial production planningRead more
Siemens is looking to the future with the AI Demand Prediction Platform. Thanks to machine learning and AutoML, precise demand forecasts can be created for over 100 products and production can be better planned. Launched as a proof of concept, the platform quickly developed into a system that can be used productively. The self-service web application will soon be used in other plants.
Siemens: AI demand prediction platform for industrial production planningRead moreProject durationSince February 2022
Proof of conceptin a few weeks
Time series predictionfor 100 different products
-
TÜV NORD GPT: Development of AI assistanceRead more
Find relevant information faster by chatting with documents? It's possible! The TÜV NORD GROUP uses GPT technology in the secure Microsoft Azure Cloud. With the aim of optimizing knowledge management and efficiency. The system enables new usage options within the testing group and is operated securely. Find out more about the innovative AI assistance system now.
TÜV NORD GPT: Development of AI assistanceRead moreProject durationsince September 2023
33.000GPT applications in the first month
ChatGPT Model 4in the European Microsoft Azure Cloud
-
Schöck components: Improvement of the requirements processRead more
Together with MaibornWolff, the construction industry specialist optimized the requirements management of its Scalix design software. Thanks to the digital design approach, the technical requirements were re-specified and the software was further developed in a user-centered manner. The aim is to continuously increase user satisfaction and integrate internal and external interests. Read more about the methodology and results now!
Schöck components: Improvement of the requirements processRead moreProject durationsince 2022
Team size2-3 Digital Designer:inside
In 2024Scalix replaces old software -
VW: Digitization of key production figures with the iProcess appRead more
Less paper, more efficiency: Volkswagen replaces analog processes with the iProcess app. Cloud-native technologies and digital design enable intuitive recording and analysis of key production figures. This increases transparency and overall equipment effectiveness and paves the way for predictive maintenance at the automotive group.
VW: Digitization of key production figures with the iProcess appRead moreProject durationSince January 2021
Team size5 to 10 persons
Fast app developmentthanks to Digital Design
-
DER Touristik: Become a digital travel companion in 7 monthsRead more
Travel information, bookings, support - all in one app. With Flutter, MaibornWolff developed a cross-platform solution for DER Touristik. In just seven months, a stable app was created for iOS and Android that supports multiple brands, languages and countries. This is how customer proximity travels.
DER Touristik: Become a digital travel companion in 7 monthsRead more7 monthsFrom Kickoff to Go Live
iOS and AndroidDigital travel companion
Whitelabelling solutionUncomplicated integration of additional brands, languages and countries
-
Mixed reality: driving a real car in a virtual worldRead more
Virtual racing in a real car? MaibornWolff made it possible for the BMW M. Within three months, we used Unreal Engine 4 to develop a prototype that processes vehicle signals with high performance and creates an immersive driving experience without motion sickness. The cockpit remains real, the surroundings become the racetrack.
Mixed reality: driving a real car in a virtual worldRead more<3 monthsFrom the vision to the prototype
3D applicationsin real time
TeamUnreal development, XR technology, game design, smart devices, 3D content
-
KUKA: Web interface for a new Human Machine InterfaceRead more
Rethinking robotics: KUKA is working with us to develop iiQKA.OS - an operating system with an intuitive web HMI. Using web technologies and scrum methods, we enable flexible customization and simple control. Open collaboration makes robotics more accessible than ever before.
KUKA: Web interface for a new Human Machine InterfaceRead moreGoalReplacing the current control software
iiQKA.OSFast and intuitive development
> 11,000 hoursProject work
-
STIHL: Control iMOW robotic mower via appRead more
Robot mower redefined: The iMOW from STIHL makes lawn care smarter. Our software expertise combined with STIHL's hardware know-how ensures intuitive app control. The result? A networked device that makes gardening easier - simple, efficient, innovative.
STIHL: Control iMOW robotic mower via appRead moreProject durationsince August 2020
Robot mowerControl via app
Process optimizationwith the customer
-
DEKRA: Modern enterprise architecture thanks to co-creationRead more
New IT for a sustainable future: the global auditing group needed to modernize its IT landscape. Co-Creation created a harmonized architecture and the EA Community promotes cross-border exchange for strong IT until 2025 - and beyond.
DEKRA: Modern enterprise architecture thanks to co-creationRead moreMost important method:Building an EA community
Created conceptEnterprise Architecture
Cooperationat eye level
-
Miele domestic appliances are networked worldwideRead more
How do household appliances become smart? Miele relies on an IoT platform that we played a key role in developing. Container-based architecture ensures stable communication, DevOps for continuous improvement - so that smart appliances can be found in millions of households worldwide.
Miele domestic appliances are networked worldwideRead moreProject durationsince 2016
Success factors:High availability and scalability
IoT platformwith container-based architecture
-
MAN: Secure Software Development Life CycleRead more
Trucks are networked - and therefore unfortunately also targets for attack. With SSDLC, MAN relies on security by design and integrates the highest security standards directly into development. Together with 22 teams, we have established security measures that go beyond the legal requirements.
MAN: Secure Software Development Life CycleRead more22 monthsProject duration
UNECE R155successfully integratedMethodsSecurity Champions, DevSecOps, OWASP SAMM
-
It's LOS: Building a cloud-based low-code applicationRead more
Democracy meets digitalization: For "Es geht LOS!", we developed a low-code app for candidate management in five weeks. Built on AWS, it enables secure draws and efficient user management - for more citizen participation digitally.
It's LOS: Building a cloud-based low-code applicationRead moreProject durationSince the beginning of 2022
MVPin only 5 weeks
TechnologiesAmplify, AppSync, CodeCommit, IAM, Cognito, DynamoDB, Lambda
-
Monitoring alarms in industrial plantsRead more
Safety in industrial plants requires a real-time overview. We developed a live monitoring platform that networks measuring devices and collects data via Azure IoT and Kubernetes. A scalable MVP was created in just three months: alarms appear in under ten seconds thanks to automated data acquisition via smartphone and Bluetooth.
Monitoring alarms in industrial plantsRead more3 yearsProject duration
<3 monthsto the MVP
Cloud migrationModernization & relocation -
Planning systems: Optimizing the capacity utilization of pressing plantsRead more
Maximum capacity utilization, minimum costs: Our customer relies on a central planning system for pressing plants. We have been supporting its further development with .NET Core, GraphQL and PostgreSQL for over ten years. Now the journey is moving to the cloud - for greater scalability, flexibility and efficiency.
Planning systems: Optimizing the capacity utilization of pressing plantsRead more>10 yearsCustomer support
Technological modernizationCloud-ready platformEfficiency through dataSite-specific cost planning -
Global workforce planning systemRead more
How do you achieve globally harmonized workforce planning? With a modern web application based on domain-driven design and hexagonal architecture. Event sourcing ensures transparent traceability, while Azure and Quarkus provide stability and scalability. The result: a flexible, future-proof solution.
Global workforce planning systemRead moreTeam sizeUp to 8 employees
Domain Driven DesignDevelopment approach
Microsoft Azure Cloudallows easy roll-out of new versions
-
DER Touristik Online: Development and migration of a multi-client capable travel booking platformRead more
Different brands, one platform: DER Touristik merges several independent websites. We are supporting the migration to the AWS cloud with digital design, microservices and testing. The focus is on performance, SEO and UX - for a seamless digital travel experience.
DER Touristik Online: Development and migration of a multi-client capable travel booking platformRead moreStandardized platformMulti-client travel portalQuality assuranceEnd-2-End test automationCloud transformationMigration to AWS cloud -
KUKA: UI/UX design for an app for load data analysis for industrial robotsRead more
How do you reduce support requests? With a smart UX! KUKA and MaibornWolff developed a web-based application for load data analysis. Through "Understand/Build/Learn" we recognized challenges early on and validated solutions for an intuitive user experience.
KUKA: UI/UX design for an app for load data analysis for industrial robotsRead moreMethodProduct Experience Design
Customer requestEasier interaction between users and the system
Our goalOptimized load data analysis, fewer support requests, higher satisfaction -
BMW Group: Replacement of a production-critical legacy systemRead more
20-year-old system, new digital future. We gradually migrated production software to a flexible architecture. After two years, central plants were running on the new solution - stable, fail-safe and ready for the challenges of tomorrow.
BMW Group: Replacement of a production-critical legacy systemRead moreProject durationMid-2018 to the beginning of 2024
Team size25 employees
Legacy systemreplaced after 20 years
-
BMW Group: Virtual reality brings vehicle design to lifeRead more
From the first draft to series production - BMW uses VR to visualize the entire development process. Based on the Unreal Engine, a uniform platform visualizes designs and processes. This saves on hardware prototypes and enables location-independent collaboration. MaibornWolff plays a key role in driving the development and integration of these VR use cases.
BMW Group: Virtual reality brings vehicle design to lifeRead more3.2 yearsProject duration
CooperationLocation-independent and virtual
InfrastructureScalable and expandable thanks to the cloud
-
BMW Group: Remote software upgrade for vehiclesRead more
No visits to the workshop, no stress - thanks to Remote Software Upgrade, BMW vehicles worldwide remain up-to-date "over-the-air". MaibornWolff has been developing and operating the backend for secure updates for over three years. Microservice architectures and DevOps approaches guarantee stability, performance and security.
BMW Group: Remote software upgrade for vehiclesRead more5 yearsProject duration
Millions of vehiclesreceive new features thanks to "over-the-air" upgrade
IT securityAlways up-to-date thanks to remote software upgrade
-
Creditreform: Secure proof of identity on the webRead more
Verifying online identities in a forgery-proof manner while maintaining user-friendliness - CrefoTrust makes it possible. Together, we developed a solution that creates trust with blockchain technology and proofs of concept. Personal and company data remain protected, while verifications run smoothly.
Creditreform: Secure proof of identity on the webRead more5 yearsProject duration
Pilot testsbased on several PoCs
Decentralized identityallows tamper-proof storage of identities and company information
-
Bayernwerk: Knowledge management via teamsRead more
Experience must not be lost - Bayernwerk digitizes the knowledge of long-standing employees. MaibornWolff designed an intuitive MS Teams app with a clear UX/UI. Close collaboration, lived Scrum values and user-centered development make the app a success. Promoting exchange, optimizing processes - this is how knowledge transfer works today.
Bayernwerk: Knowledge management via teamsRead more6 monthsProject duration
Target:Identify implicit knowledge
Requirements:a user-centered, intuitive and clear UX/UI design
-
Weidmüller: Progression of the Industrial Service PlatformRead more
IoT meets agility - Weidmüller and MaibornWolff developed the easyConnect platform for remote access, data visualization and machine learning. After intensive exploration, an MVP was created, accompanied by a cross-functional Scrum team. Making Industrial IoT smarter and more efficient.
Weidmüller: Progression of the Industrial Service PlatformRead more12 monthsup to the MVP
8 weeks analysisof professional, technical and organizational factors
Innovative portalfor end-to-end solutions
-
SMA: Development of a Web UI for ennexOS platformRead more
Optimizing energy flows, reducing costs - we have been developing the Web UI of the ennexOS platform with SMA Solar Technology since 2016. It digitizes energy management processes for over a million users and combines smart solutions for a sustainable energy future.
SMA: Development of a Web UI for ennexOS platformRead moreProject durationsince 2016
> 1.000Modules and components in ennexOS platform
> 7.000Fuse tests
-
digikoo GmbH: Apple Vision Pro for city plannersRead more
Planning cities smarter: Together with TUM, we developed the 3Digipad for Apple Vision Pro. It visualizes complex energy data in 3D and makes scenarios intuitively tangible. Dynamic building data and KPIs support urban planners in making sustainable decisions.
digikoo GmbH: Apple Vision Pro for city plannersRead more4 monthsProject duration
3D map with KPIsDisplay building data dynamicallyEnergy dataImmersive visualization -
digikoo: A data platform for the Azure CloudRead more
Structured geodata, automated quality assurance, seamless provision - we developed a powerful Snowflake data platform on Azure for Digikoo. It makes analysis easier for data scientists and lays the foundation for precise forecasts and new use cases.
digikoo: A data platform for the Azure CloudRead more5 monthsProject duration
Climate changePlan digitally and implement efficiently
Foundation data platformMicrosoft Azure Cloud
How does an IT security check work at MaibornWolff?
IT security starts with clarity: what risks exist, what protective measures are already effective and where is there a need for action? Our IT security check provides you with a sound analysis of your current security status and a clear basis for decision-making. We use a structured, practical approach that is based on common security standards and tailored to your company.
Our approach is divided into four phases:

1. Joint target discussion
At the beginning, we define the scope of the IT security check together. Which systems and processes should be checked? Which regulatory requirements, specific threat scenarios or company specifications are relevant?
2. Status quo analysis
We analyze your current IT security landscape, including existing protective measures, access controls and guidelines. Our experts check networks, systems and applications for technical vulnerabilities and potential attack vectors. We evaluate the effectiveness of existing protection mechanisms and identify potential for optimization.
3. Compliance check
In addition to identifying vulnerabilities, we check what requirements you have with regard to relevant security standards and whether you are already addressing them. With our certification preparations for standards such as ISO 27001, UNECE RE 155 and NIST SP 800, you can be sure of your compliance.
4. Further individual steps
You receive a transparent overview of the analysis results with a clear classification of the identified risks. Depending on your needs, we will also draw up an individual action plan that offers you specific recommendations for minimizing risks. On request, we can support you in implementing these measures, whether through technical adjustments, process optimization or employee training.
Our IT security check includes these services
Our IT security check goes far beyond a standard audit - we offer an individual and practical analysis of your IT landscape that is perfectly tailored to your requirements and includes the following services as required:
-
Threat Modeling & Risk Assessment
-
Security Requirements Engineering
-
Security Process, Software and Infrastructure Check-ups
-
Certification Readiness Assessments (ISO 27001, UNECE RE 155, NIST SP 800, etc.)
-
Penetration Test Scoping & Mitigation
With over 30 years of experience in software development, cloud security and digital platforms, we know what is important: security must be practical, scalable and future-proof. That's why we combine innovative security strategies with a deep understanding of modern IT infrastructures.
FAQs: Frequently asked questions about the IT security check
Why should I take advantage of an IT security check?
An IT security check helps to identify vulnerabilities in your systems at an early stage, minimize risks and improve your IT security in a targeted manner. This protects your company from cyber attacks and data loss.
How often should I carry out an IT security check?
Regular IT security checks are essential and should be carried out at least once a year or whenever there are relevant changes in the IT landscape. This allows risks and threats to be identified at an early stage.
What are the requirements for the IT security check?
We need access to all relevant information so that we can comprehensively check your IT security. Our IT security check is carried out in close cooperation with you. Your commitment is essential for this - be it in the form of meetings or the provision of employee resources. You don't have to worry about the rest - our experts will take care of that.
What happens after an IT security check?
After the IT security check, the aim is to eliminate the identified weaknesses and continuously improve IT security. As part of our IT security consulting, we work with you to analyse which measures should be prioritized and implemented. We also support you in implementing suitable security solutions and protective measures to optimize your security strategy in the long term.