WebIQ security capabilities supporting DNV SP3

As industrial and maritime systems become increasingly connected, cybersecurity must be built into every layer of the HMI solution. WebIQ 2.21 includes a comprehensive set of security capabilities that support the implementation of DNV Security Profile 3 (SP3) requirements. Together, these features help strengthen access control, secure communications, traceability, system integrity, and operational resilience across modern HMI applications.

Multi-factor authentication

Passwords alone are not enough. WebIQ 2.21 supports Multi-Factor Authentication (MFA), adding an additional verification step for critical access and operations. Using industry-standard TOTP technology, authentication can be performed completely offline and works with popular apps such as Microsoft Authenticator, Google Authenticator, and Authy.

By strengthening identity verification and access control, MFA supports the cybersecurity objectives of DNV SP3-oriented system designs.

 

TLS encryption and certificate management

Secure communication is fundamental to modern industrial systems. WebIQ supports TLS 1.3 encryption and includes certificate management tools that simplify deployment and maintenance of secure connections between HMIs, controllers, and cloud systems. Data remains protected against interception and tampering.

These capabilities help protect data in transit and establish trusted communications between connected system components.

 

Brute force protection

Support for ECMAScript modules in custom packages allows developers to structure code more cleanly and use modern JavaScript patterns. This leads to more maintainable HMIs and faster development cycles.Automated password attacks are a common threat. WebIQ protects against brute force attempts through login rate limiting, response delays, and account lockout mechanisms that make automated guessing attacks ineffective.

This helps reduce the risk of unauthorized access and strengthens the overall security posture of critical HMI environments.

 

Active session management

Maintain visibility and control over connected users. Administrators can monitor active sessions, enforce timeouts, and immediately terminate suspicious or unauthorized connections from a centralized security dashboard.
Active session control supports rapid response to security incidents and helps maintain control over authenticated user access.

 "Cybersecurity is no longer a feature. It's a foundation. With built-in protection from access control to data integrity, WebIQ helps safeguard industrial operations against today's evolving threats." Sven Kiekbusch, Head of WebIQ 

Complete audit trail

WebIQ provides detailed audit logging to support troubleshooting, compliance, and security investigations. User actions and parameter changes are recorded with secure timestamps, helping organizations maintain full traceability across HMI operations.

Comprehensive audit records provide valuable evidence for security assessments, investigations, and regulatory compliance activities.


Project integrity verification

Integrity checks help ensure that deployed HMI projects have not been modified without authorization. Using SHA-256 cryptographic hashing, WebIQ can detect even the smallest change to project files, providing confidence that approved applications remain unchanged.

This supports software integrity requirements by helping verify that approved configurations and applications remain unaltered.

Supporting DNV Security Profile 3

Together, these capabilities provide key cybersecurity building blocks for modern maritime and industrial HMI solutions. By strengthening authentication, protecting communications, enabling traceability, supporting active session control, and verifying software integrity, WebIQ helps system designers implement many of the security measures expected in DNV Security Profile 3 environments.

When properly configured and integrated into the complete automation system, WebIQ provides a strong cybersecurity foundation for organizations pursuing DNV SP3-aligned system designs while also supporting broader regulatory initiatives such as the Cyber Resilience Act (CRA).


Secure by design. Ready for tomorrow.

With WebIQ, you can build modern web-based HMIs that combine openness and usability with security-focused design. Reduce operational risk, strengthen cybersecurity resilience, and create HMI solutions prepared for the evolving requirements of maritime and industrial automation.

Download WebIQ version 2.21 here.

 

Sign up and experience WebIQ today!

Group 12