Skip to main content

trade with estonia

EU Cyber Resilience Act: market access at stake – an Estonian IT specialist shows manufacturers the way forward

Marco Spielmann, CEO of Proekspert, underscores that Estonia’s early focus on digital trust is becoming a defining factor for the future of connected industrial products. Photo: Proekspert

From December 2027, the EU Cyber Resilience Act (CRA) will be fully applicable, forcing manufacturers of connected products to guarantee cybersecurity throughout the entire lifecycle or lose access to the EU market. For German SMEs, this means urgent upgrades to existing products without halting production. Estonian software engineering company Proekspert specialises in exactly this task—bringing legacy products up to CRA standards without redesigning hardware.

“For many manufacturers, the Cyber Resilience Act is not a future problem. It is already embedded in products currently on the market. Industrial drives and configuration tools are a good example: almost every product with digital elements is now a potential point of attack. Security can no longer be treated as an add-on,” says Marco Spielmann, CEO of Proekspert.

“Estonia learned early that digital systems only work when people can trust them. The same is increasingly true for connected products in industry. Companies that understand this early will be in a much stronger position.”
Marco Spielmann, CEO of Proekspert

Proekspert supports manufacturers from the initial gap analysis through to certification readiness under IEC 62443, the internationally recognised standard for industrial cybersecurity. What sets the company apart from a traditional IT service provider is that it does not think in patches, but in product lifecycles. Secure update mechanisms, vulnerability management and clear documentation are the structures that help keep products secure, compliant and manageable in the long term, even as requirements evolve.

The company will present its services and solutions at Hannover Messe 2026 at the Estonian joint stand in Hall 26, Stand F78.

Upgrading existing products – without hardware redesign

One example shows how this works in practice. For Danfoss Drives, a Danish manufacturer of industrial drive systems, Proekspert modernised systems that had been in use for more than 20 years – entirely through software, without touching a single hardware component. The result was IEC 62443 Security Level 1 and a successfully passed TÜV-SÜD-audit.

These systems do not operate in simple environments. Industrial processes, building technology and critical infrastructure all depend on devices that cannot fail in operation. In such contexts, cybersecurity and reliability must work together under real-world conditions. For SMEs whose products have been in the field for years, the Danfoss project sends an important signal: upgrading for compliance does not have to mean starting from scratch.

Act

From December 2027, the EU Cyber Resilience Act (CRA) will be fully applicable. Manufacturers of connected products will need to ensure cybersecurity across the entire product lifecycle – or risk losing access to the EU market. Photo: Proekspert 

Cybersecurity as a national priority: Estonia’s head start

Proekspert’s expertise is no coincidence. Estonia has fully digitalised its public infrastructure – from government services and healthcare to elections and taxation. Since the large-scale cyberattacks of 2007, cybersecurity has been treated as a national priority rather than a box-ticking exercise. Today, Estonia is home to the NATO Cooperative Cyber Defence Centre of Excellence.

“For many manufacturers, the Cyber Resilience Act is not a future problem. It is already embedded in products currently on the market. Industrial drives and configuration tools are a good example: almost every product with digital elements is now a potential point of attack.”
Marco Spielmann, CEO of Proekspert

Proekspert has grown in this environment, working with software and systems where reliability and cybersecurity are critical. Its experience ranges from financial systems to industrial environments in which software directly affects the operation of safety-critical systems. These solutions have been shaped by real-world demands, not laboratory conditions.

“Estonia learned early that digital systems only work when people can trust them. The same is increasingly true for connected products in industry. Companies that understand this early will be in a much stronger position,” says Marco Spielmann.

Hannover Messe 2026: conversation instead of brochures

Proekspert and 8 other Estonian companies will be present at Hannover Messe at the Estonian joint stand in Hall 26, Stand F78. Marco Spielmann, CEO of Proekspert, will be available in German for background conversations and initial meetings with companies that want to understand where they stand on the CRA and what their next step should be.

Other Estonian companies that are participating at Hannover Messe are driving industrial efficiency with cutting-edge solutions:

  • 1oT provides multi-carrier SIM solutions for seamless IoT device connectivity across 173 countries. Its technology already powers around 2 million IoT devices, ranging from bird trackers to e-scooters.
  • Eliko is a leading provider of Ultra-Wideband (UWB) technology. Its Eliko RTLS real-time localisation system offers high-precision tracking with 10 to 30 cm accuracy. A collaboration with Bosch Thermotechnology highlights how UWB technology optimises material flows in manufacturing and reduces production downtime.
  • Forecr provides high-performance Edge AI hardware solutions. They bridge the gap between AI algorithms and physical deployment, offering the “physical brain” required to run powerful AI on-site in harsh industrial environments. The company has a proven track record with some of the biggest names in European industry and defence, including Airbus Defence, KNDS, and DIEHL Defence.
  • Inission Tallinn stands out as a full‑service electronics and mechanics manufacturer offering end‑to‑end support from product development to large‑scale production. Its ISO 9001, ISO 14001, ISO 13485, and ISO 45001 certifications underline a strong commitment to quality, sustainability, reliability, and safety.
  • Proekspert develops intelligent software solutions for smart devices and IoT applications. With the establishment of Sensorise GmbH in Bremen, the company has expanded its presence in Germany.
  • Radius Machining demonstrates how modern CNC technology boosts efficiency and reduces resource consumption—a concept already embraced by companies like Stäubli Hamburg GmbH.
  • Thorsteel specialises in custom stainless steel components for the food, chemical, biotech, and energy industries.
  • TB Works is a contract manufacturer specializing in process equipment for leading technology suppliers. With two workshops and 150 skilled employees, the company delivers screw and belt conveyors, frames, chassis, hoppers, and dosing equipment for sectors such as pulp and paper, wood processing, minerals, and waste handling and processing. Its expertise covers both carbon and stainless steel, supported by ISO 9001, ISO 3834‑2, and ISO 1090‑2 EX2 certifications.
  • Valdek is a family‑owned sheet‑metal manufacturer with more than 30 years of experience, using in‑house software and automated laser‑cutting, punching, and CNC‑bending systems to ensure precise, efficient production. The company delivers custom components from prototypes to large‑scale series for sectors such as telecommunications, robotics, construction, and retail.

This content is funded by the European Union – NextGenerationEU.

Are you interested in trading with Estonia? Enterprise Estonia provides sourcing services for foreign enterprises. Contact Estonian export advisors or use our free e-consulting service to start trade with Estonia. 

Request sourcing help
Co-Funded by the European Union