Four Steps to the Next Generation of Product Cybersecurity
Düsseldorf — After unveiling its “Decision Intelligence” concept, the Düsseldorf-based product cybersecurity company ONEKEY has outlined the next steps in developing its platform. The four-stage AI roadmap illustrates how artificial intelligence will evolve from an intelligent information system to a comprehensive product security assistant without replacing human decision-making responsibility.
“Many companies today are asking how AI can be meaningfully and responsibly integrated into existing security processes,” explained Jan Wendenburg, ONEKEY’s CEO. “Our answer is: step by step. Each phase of development increases the benefits for our customers while maintaining transparency, traceability, and control.”
Phase 1: ONEKEY’s AI Agent Makes Security Intelligence Accessible in Natural Language
The first milestone is the context-aware chat agent, ONEKEY AI. Users will soon be able to ask questions in natural language about vulnerabilities, firmware, software components, software bills of materials (SBOMs), products, and OQL queries (ONEKEY Query Language). Answers will be based directly on analysis results and security data from the ONEKEY platform, providing reliable, evidence-based information.
“Security information should not be hidden in complex menus or databases,” said Jan Wendenburg. “Experts must be able to quickly access reliable knowledge, whether they are addressing a detailed technical question or preparing a management decision.”
Phase 2: ONEKEY’s AI Agent Provides Security Information for Enterprise AI Systems
In the second step, ONEKEY provides controlled access to security data for organization’s AI agents, applications, and automated workflows. This allows companies to integrate evidence-based analysis results into their existing business processes, such as development environments, ticket systems, compliance platforms, and internal AI assistants.
Permissions, role models, and data sovereignty are always maintained. Companies decide which information their applications can use.
“AI is changing the way teams work with security information. Our goal is to make ONEKEY’s insights available where decisions are made—within our users’ existing tools and workflows,” said Jan Wendenburg. This lays the foundation for faster, more informed decisions without compromising control, permissions, or robust, evidence-based context,” said Jan Wendenburg.
Phase 3: ONEKEY’s AI Agent Supports Security Decisions
With this third milestone, ONEKEY transforms an information system into an intelligent security assistant with integrated AI. ONEKEY helps users better understand the technical context of vulnerabilities, trace their impact on software components, set priorities, and determine possible courses of action. However, the final assessment is deliberately left to humans.
“AI is not meant to replace security professionals, but rather to help them understand complex relationships more quickly,” Jan Wendenburg emphasized. “In regulated industries especially, decisions must be traceable, documented, and subject to professional accountability at all times.”
Phase 4: ONEKEY’s AI agent Supports Entire Security Workflows
The ONEKEY AI Agent, which is integrated into the platform, will support numerous operational tasks related to product safety. These include preparing technical reports, assisting with configuration tasks, managing histories, creating analysis profiles and rule sets, and conducting cross-firmware comparative analyses.
Even at this stage of development, the company explicitly views the AI agent as an assistant. Critical decisions remain with humans, authorization policies are considered, and all work steps are transparent and traceable.
AI Is Becoming an Essential Component of Modern Product Safety
According to ONEKEY, artificial intelligence is fundamentally changing the way we approach product cybersecurity. While traditional tools offer individual analyses, future platforms are expected to integrate security knowledge, business processes, and human expertise in an intelligent way.
“The future belongs to platforms that generate and turn data into comprehensible, actionable knowledge,” Jan Wendenburg summarized. “Our roadmap shows how decision intelligence is becoming a reality, step by step, as trusted support for the people who make security-critical decisions every day.”
ONEKEY is systematically expanding its platform into an AI-powered decision intelligence solution with the roadmap presented, thereby laying the foundation for the next generation of product cybersecurity.
ONEKEY is the leading European specialist in Product Cybersecurity & Compliance Management and part of the investment portfolio of PricewaterhouseCoopers Germany (PwC). The unique combination of the automated ONEKEY Product Cybersecurity & Compliance Platform (OCP) with expert knowledge and consulting services provides fast and comprehensive analysis, support, and management to improve product cybersecurity and compliance from product purchasing, design, development, production to end-of-life.
Critical vulnerabilities and compliance violations in device firmware are automatically identified in binary code by AI-based technology in minutes – without source code, device, or network access. Proactively audit software supply chains with integrated Software Bills of Materials (SBOMs) generation. “Digital Cyber Twins” enable automated 24/7 post-release cybersecurity monitoring throughout the product lifecycle.
The integrated ONEKEY Compliance Wizard already supports compliance with requirements from IEC 62443-4-2, ETSI EN 303 645, UNECE R155, and many other standards and regulations.
As part of the EU-funded CRACoWi (Cyber Resilience Act Compliance Wizard) project, ONEKEY is collaborating with 13 European partners to develop an AI-powered assistant for the automated implementation of the EU Cyber Resilience Act (CRA).
The solution will guide companies through the entire compliance process—from the initial CRA scope assessment to the generation of the required Declaration of Conformity.
The Product Security Incident Response Team (PSIRT) is effectively supported by the integrated automatic prioritization of vulnerabilities, significantly reducing the time to remediation.
Leading international companies in Asia, Europe and the Americas already benefit from the ONEKEY Product Cybersecurity & Compliance Platform (OCP) and ONEKEY Cybersecurity Experts.
Further information: ONEKEY GmbH,
Sara Fortmann, email: sara.fortmann@onekey.com,
Toulouser Allee 19A, 40211 Düsseldorf, Germany,
web: https://onekey.com
