ondeso SR inventories, secures and manages all OT clients centrally and across manufacturers on systems from Windows XP onwards. No Active Directory, domain connection or scripting knowledge required. Specifically developed for OT environments with growing compliance requirements that cannot be managed with IT tools.
“Thanks to the highly detailed overview of our OT environment, we can now quickly determine whether we are affected when new software vulnerabilities become known.”
Wolfgang Rechenauer
Engineer EMSR at NAFTA Speicher
“ondeso SR is essentially my Swiss Army Knife for OT management with a whole range of functional options.”
ondeso Customer and Automation Technology Operations Engineer at an Automotive Manufacturer
“By using ondeso SR, we can now completely install and finalise the configuration of the clients in 1.5 hours.”
Stefan Hiemeyer
Team Lead Automation Scada at Groninger
“Once you have understood the basic specifics of ondeso SR, the application is always the same and you no longer have to differentiate between Windows 7 or Windows 10. For me, it’s always the same and I can use it to manage the heterogeneous world that we have very well.”
ondeso Customer and Automation Technology Operations Engineer at an Automotive Manufacturer
“By taking an inventory of all assets, we are now able to carry out and manage processes such as patch-, backup- and security management centrally, flexibly and automatically.”
Volker Husemann
Senior Expert Workplace & Software Management at Thyssenkrupp Steel
“We have never introduced a software tool into our production facilities that has paid for itself in such a short time. The fast and secure update process in the wake of the WannaCry threat alone has enabled us to save time and effort while maximising process security.”
ondeso Customer and Group Manager Industrial IT
of a Food Company
Why is it becoming increasingly difficult for OT managers to maintain an overview and keep up with growing requirements?
You don’t know exactly what is running on your OT clients
OT infrastructures grow over many years. Systems from different manufacturers are added, old ones continue running and responsibilities change. Without a central overview, you don’t know what is running on which client, whether backups have been created or when systems were last patched. This makes targeted action difficult.
Internal requirements and new regulations increase the pressure
IT departments require quarterly patching, while NIS2 demands verifiable security measures. Tools that work in IT often fail in OT environments. As a result, tasks must be handled manually, which is time-consuming.
OT environments are fundamentally different from office IT
In OT environments, old and new systems from different manufacturers run side by side, often without domain infrastructure and in continuous 24/7 operation. Standard IT solutions regularly fail in these settings because they require Active Directory and do not support legacy operating systems. As a result, every task takes more time than it should.
With ondeso SR, you keep control of your OT endpoints, meet compliance requirements and reduce manual effort
ondeso SR brings all your OT systems into a central interface. You always know what is running on your clients, apply patches in a controlled way, meet compliance requirements and automatically document operations.
The OT Asset Inventory automatically scans your network, even across segmentation boundaries, and keeps all OT clients continuously up to date. You can centrally access software versions, security information and other asset data, extend it flexibly and export it when needed.
With Backup & Restore, you define when and how backups are executed. ondeso SR runs them automatically, verifies their completeness and removes outdated backups according to your rules. A Drive SnapShot licence is included.
Patch management enables flexible rollouts: You determine the timing, order, and process, allowing patches to be deployed efficiently and in a controlled manner, either on an ad hoc basis or within scheduled time windows. It can be used without WSUS or Active Directory. Update lists compliant with IEC 62443-2-3 are supported.
Configuration management allows you to manage your configurations centrally and maintain a clear overview at all times. ondeso SR continuously monitors compliance with your specifications and highlights any deviations, enabling you to make targeted adjustments to security settings and firewall configurations.
The software distribution enables you to package software without programming or scripting knowledge and deploy it in a standardised way to all target PCs. ondeso SR also records what is installed on each client.
Industrial IT documentation automatically logs every activity and gives each OT client its own digital lifecycle record. Downtime, errors and administrative tasks are recorded in a digital shift logbook.
With Client Automation, you define processes once and ondeso SR executes them. This also works across reboots and different locations, without Active Directory or domain connectivity. You can also reuse created workflows at other sites.
End-of-Life management enables you to centrally and standardised manage systems from Windows XP SP3 onwards, while using the lowest possible amount of resources. ondeso SR extracts the best possible update management from legacy operating systems.
All OT assets are centrally recorded and clearly displayed in the ondeso SR Admin GUI. You define how your systems are grouped yourself, for example by production areas, sites or lines. This gives you a clear overview and lets you take targeted action.
In the ondeso SR Admin GUI, you define workflows called “Operations”. This creates the foundation for standardised processes that can be flexibly adapted to your production workflows.
You then define when these tasks are executed: immediately at the push of a button, within defined maintenance windows (planned or unplanned), or via recurring schedules. This lets you control execution in line with operations and reduce interruptions to production processes.
You can also hand over execution to shopfloor personnel who know the production processes on site best. With the ondeso SR Start Center, tasks are executed with a simple click and without any technical expertise.
All activities are recorded in full and remain traceable at any time. Reports can be created in just a few clicks, allowing you to answer questions about status, security or incidents without additional effort.
Christoph Ackermann, Head of Professional Services, will walk you through ondeso SR in detail and answer your questions. Book a demo now and see the software in action.
Suitable for 200+ clients, designed for OT administrators and maintenance teams
ondeso SR is suited for manufacturing companies and plant manufacturers with 200 or more OT clients. IT and OT teams can centrally plan tasks and either execute them directly or delegate them to the shopfloor in a targeted way. This creates a flexible interaction between responsibilities, ensuring execution happens exactly where it is needed in the process.
ondeso SR in Action
Your next steps if you are interested in ondeso SR
We show you ondeso SR live and give you a comprehensive overview of the features, tailored to your use cases and specific requirements. Request a demo.
In the PoC, you test ondeso SR together with us in your real OT environment. You will directly experience how inventory, patch management, backup and automation can be implemented in your operations.
After the PoC, training and rollout begin. If the prerequisites are in place, installation can be completed within a few hours, after which your OT systems can be managed reliably.
Frequently Asked Questions
How many devices can be managed with ondeso SR?
Experience shows that several thousand devices per instance can be operated without issues. Beyond a certain scale, additional technical requirements apply, which are discussed during the planning phase.
How does an ondeso SR Proof of Concept (PoC) work?
Learn more about the ondeso SR PoC process here.
What does the licensing model look like?
The licensing model is based on the number of actively managed clients. It follows a subscription model with annual billing.
What are the installation requirements?
A Microsoft SQL database is required as well as a file share via SMB, CIFS or DFS. If the prerequisites are in place, installation takes only a few hours and full rollout just a few days.
Server side: Windows Server 2022 or newer, Microsoft SQL Server 2019, optional Active Directory for login.
OT client: Windows XP SP3 / Server 2003 SP1 or newer, at least 1 CPU core.
Is hardware upgrade required?
No, ondeso SR is purely software based and integrates into your existing infrastructure.
Is Active Directory required?
No, ondeso SR includes its own user management and works without Active Directory. However, an existing AD can optionally be used for authentication.
Is a domain required?
No, systems that are not part of a domain can also be managed.
Does the OT client require a framework such as .NET or Java?
No, the client component is delivered as a fully built package and does not require any additional framework or runtime environment. This avoids additional licensing costs, for example for Java, and reduces system complexity, which also simplifies vendor approvals. Issues with file exchange or parallel framework versions are avoided as well, which are common in such environments. Resource consumption on production systems remains minimal.
Are Linux operating systems supported?
Linux currently supports inventory functionality. A full Linux client is under development.
Christoph Ackermann, our Head of Professional Services, will guide you through ondeso SR and answer all your questions. Book a demo now and see ondeso SR live in an OT environment like yours.
You need to load content from reCAPTCHA to submit the form. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from Turnstile. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from reCAPTCHA. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More Information
Book a Demo