Case studies

Measurable outcomes from retrofit and reverse-engineering projects — anonymized, some representative scenarios. Each case study shows symptom, technical path, and documented result; € and % only where described in the report. See individual case studies.

Anonymized references from practice

IND-008 EU · Condition monitoring / edge FFT

Sporadic failures on rotating equipment — no usable data basis for early warning during operation.

Edge-FFT diagnostic station as a retrofit path: trends, alarm history, and scalable rollout (see case study).

Case study IND-008 →
MFG-002 EU · Motor driver / PCB

EOL core chip, no spares, production at risk.

Drop-in PCB redesign after hardware RE — documented cost vs. downtime (see case study).

Case study MFG-002 →
AUTO-004 DACH · Field devices / firmware

Critical flaws in proprietary firmware, compliance requirement.

Security audit and hardening — documented reduction in unplanned outages (see case study).

Case study AUTO-004 →
PROTO-006 DACH · Foil punching machines at customer sites worldwide

Machine manufacturer, EOL drives in customer machines; lost source — protocol rebuilt via passive RE (sniffer, Ghidra).

STM32 intermediate controller in production, three axes on new inverters — machine software unchanged.

Case study PROTO-006 →
IOT-007 RU / EU · Smart water meter (ULP)

Class C, ≥12 year battery, radio swap without breaking seals — OEM needed STM32L4 ultra-low-power core and multi-radio exo-modules.

ULP core, CN injection mould, exo Wi‑Fi/NB‑IoT/LoRa/RS-232, BLE firmware and app advertising.

Case study IOT-007 →
SES-005 DACH · Production line (1996) / analog

No digital interfaces, high unplanned downtime — replacement only via full line swap.

78 points, ESP32 edge FFT, MQTT pipeline and dashboard — predictive maintenance without machine replacement.

Case study SES-005 →

No marketing numbers without context: region, system type, technical challenge, and measurable outcome — linked to full case studies.

IOT-007 Metrology IoT · ULP

ULP smart water meter — CN mould, exo-modules (Wi‑Fi/NB/LoRa/RS-232), BLE app

Class C, modular radio, injection-mould housing — full stack from exo PCBs to BLE advertising in the app.

STM32L4 ULPInjection mouldExo-modulesBLE advertisingMobile app

Savings

Full stack

Mould + exo + app

Duration

Product cycle

IOT-008 Automation IoT · cloud ops

Connected industrial device — MQTT fleet portal + staged OTA

Device firmware existed, but fleet visibility and controlled updates required a complete cloud path (MQTT → DB → portal → OTA).

ESP32MQTTPostgreSQLOTAPortal

Savings

Full stack

Ops + OTA

Duration

Product cycle

IND-008 Manufacturing Edge FFT

Edge-FFT diagnostic station — condition monitoring retrofit

Sporadic failures on rotating equipment, no usable data basis for early warning.

Edge FFTVibrationTime seriesDashboard

Savings

Retrofit

Parallel path

Duration

Phased

PROTO-006 Manufacturing Protocol RE

Machine manufacturer: EOL drives — protocol rebuilt, inverters retrofitted

Machines at customer sites worldwide, lost control source — protocol rebuilt via passive RE with the manufacturer.

Protocol RESTM32 bridgeVirtual modelsServo retrofit

Savings

Retrofit path

No machine swap

Duration

Phased

MFG-002 Manufacturing Hardware RE

PCB redesign after an EOL core chip

Motor driver IC end‑of‑life. No spares. Production stoppage risk.

PCB REKiCadSOA testing

Savings

Retrofit

No replacement

Duration

6 weeks

AUTO-003 Automation Code RE

PLC control code: Pascal → C++ rewrite

No source, no developer, no documentation. Only a binary on a 3.5" floppy.

Static analysisC++IoT gateway

Savings

Retrofit

No replacement

Duration

12 weeks

AUTO-004 Automation Firmware security

Firmware security audit & hardening (200+ field devices)

6 critical vulnerabilities in proprietary firmware. NIS2 evidence required.

Firmware REIDA ProSecure boot

Savings

Security upgrade

Readiness

Duration

8 weeks

SES-005 Manufacturing IoT retrofit

Legacy line (1996): predictive maintenance via IoT — no machine replacement

No digital interfaces — unplanned downtime, replacement only via full line swap. 78 analog points.

ESP32FFT / ESP-DSPMQTTTimescaleDB

Savings

Retrofit

No line swap

Duration

10 weeks

MFG-001 Manufacturing Protocol RE

Connected a legacy CNC controller to MES

No complete protocol spec, vendor gone. Alternative often: full machine replacement.

Protocol RENode.jsMQTT

Savings

Retrofit

No replacement

Duration

8 weeks

A similar problem in your plant?

In a 30‑minute call we review your situation — free and without commitment.

Free assessment