KiligLab
KOEN
Start a project

CAPABILITIES

Three disciplines, one standard

Energy equipment, distributed infrastructure, AI operations. Different systems, the same standard: protect first, prove it, then hand it over.

A — ENERGY SYSTEMS

Speak the plant's language.

Storage, solar and EV chargers are each a mesh of PCS, inverter and charger protocols, metering, tariffs and market rules. We work at the same resolution from field protocols up to the tariff and the market.

  • ESS
  • Solar PV
  • EV charging
  • Power trading
  • Demand response
  • Grid connection
TRY IT / PEAK DEFENSE

What we protect

  • Exposure, access and backups of the operations platform
  • Alerts that actually reach the right people
  • Operating history and metering data

What we automate

  • Discharge plans that follow the load
  • Peak defense aligned to billed hours
  • Output adjusted to DR calls and price signals
  • Fault detection with staged alerts

Services

  • EMS and PMS operations

    Stabilize and upgrade live systems without stopping them.

  • ESS peak-defense algorithms

    Design load-following discharge from measured load data and size a guaranteed reduction.

  • PCS and BMS integration

    Analyze Modbus maps and migrate communication and fault sequences when equipment changes.

  • Solar-plus-storage operation

    Combine generation forecasts with storage dispatch to optimize self-consumption and peak defense together.

  • EV charging infrastructure

    OCPP charger integration, remote control and smart charging within the contracted limit.

  • Demand response and power trading

    Plan curtailment and discharge against DR calls and price signals, and record performance.

  • Tariff-based savings modeling

    Simulate demand-charge savings using the utility's billing-demand rules.

  • Fault alerting

    Map recipients by equipment and role, and confirm delivery on real devices.

B — VERIFIABLE INFRASTRUCTURE

Trust you can verify.

Blockchains left one durable lesson: don't trust, verify. We apply it equally to distributed networks and to the industrial software supply chain.

What we protect

  • Signing keys and secrets
  • Integrity of the software you deploy
  • Whether operating records were altered

What we automate

  • Release signing and verification
  • Secret-exposure scanning
  • Record-integrity checks

Services

  • Node and validator architecture

    Design key management, double-sign protection and uptime monitoring.

  • Signed releases and supply-chain integrity

    Pin build artifacts, verify signatures and scan container images for secrets.

  • Secrets management and credential rotation

    Find credentials scattered across repos, images and runtimes; rotate them and change how they are stored.

  • Tamper-evident records

    WORM backups and hash verification, so any change to a record shows.

C — AUTONOMOUS OPERATIONS

Machines decide. Humans sign off.

What an AI agent needs is not more permission but a better policy. We first decide which work the agent owns and which a person approves — then enforce that line in code.

What we protect

  • Agent permission scope — drafts only by default
  • Instructions hidden in untrusted input such as email or documents
  • A record of every action

What we automate

  • Summaries and briefings of operating signals
  • Anomaly triage
  • Recurring reports

Services

  • AI operations agents

    Agents with risk-tiered permissions, approval gates and action logs.

  • Operational anomaly detection

    Find anomalies in time-series operating data and route them to alerts.

  • Operations reporting

    Generate boards and periodic reports directly from data.

  • Agent security review

    Test for prompt injection, privilege escalation and data-exfiltration paths.

TRY IT / HUMAN SIGN-OFF

The agent proposes. A person signs off.

17:32 SMP spike detected · Peak forecast 17:40 · ESS SOC 78%

PROPOSAL — Discharge ESS 500 kW for 25 min from 17:35; cut EV charging power 20%

Expected peak reduction 480 kW · Risk MID · Reversible

Price signal in the top 5% as of 17:30 · same-weekday 17–18h load pattern over the last 4 weeks · keeps headroom under the contracted limit within usable storage

09:00 Vendor firmware v2 available · Maintenance window: none scheduled

PROPOSAL — PCS firmware update

HIGH · irreversible → needs a maintenance window and two approvers

Demo — not connected to real equipment.

Not sure where to start securing
the systems you already run?

Request an assessment