High-Tech & Manufacturing

Challenges in the High-Tech and Manufacturing Industries

Factories are becoming digitized, products contain more and more software, and as of August 15, 2026, medium-sized and large companies in the machinery, electronics, and vehicle sectors will be subject to the Cyberbeveiligingswet (Cbw, the Dutch Cybersecurity Act). Key challenges:

  • Production systems that don’t communicate with each other
    MES, SCADA, PLCs, sensors, and ERP often operate in silos. This limits visibility and slows down decision-making between engineering and operations. You can’t secure what you can’t see: OT devices such as HMIs and engineering workstations are often registered as regular IT equipment.
  • AI and simulation that never make it past the pilot phase
    Computer vision, predictive maintenance, and digital twins require standardized data pipelines, computing power, and MLOps. Gartner expects that more than 40% of agentic AI projects will have been discontinued by the end of 2027 due to costs, unclear value, or risk. The data layer and the underlying platform determine whether a model remains in production.
  • Cybersecurity Under Pressure
    Downtime, ransomware, long supply chains, and legacy on-premises systems directly impact a factory that operates around the clock. According to Dragos, 119 ransomware groups were active against industrial organizations in 2025, up from 80 in 2024. Since September 11, 2026, any company that supplies software in its products has been required to report actively exploited vulnerabilities under the Cyber Resilience Act.

Our solutions

SUE modernizes the IT systems of manufacturing companies in phases, ensuring that production continues uninterrupted.


  • Hybrid Factory Platforms Hybrid
    cloud architectures, Kubernetes at the edge for workloads without strict real-time requirements (such as data collection and computer vision inference), data pipelines, and landing zones. Control remains with the PLC. With Cilium Egress Gateway, we connect machines on the factory floor without physical NAT routers.
  • HPC and AI Infrastructure for R&D
    HPC clusters on AWS or in a hybrid environment, for simulation, chip design, digital twins, and computer vision, plus MLOps to keep models in production. NXP migrated its HPC environment using SUE to AWS. Do you use AWS Research and Engineering Studio (RES)? AWS is no longer developing it; we can help you transition to, for example, AWS Parallel Computing Service.
  • Legacy and Software Chain Ready for the CRA
    Application Modernization with Re:App, Cloud Migration and CI/CD pipelines with vulnerability scans and an overview of the components used. This allows you to identify which products contain vulnerabilities within the CRA reporting deadlines.

Projects we are proud of

Production line in a high-tech factory

Our use cases in this sector

  • Preventing Disruptions in Airport Cargo Handling: Outdated middleware and failing hardware were threatening the handling of international cargo at an airport. We modernized the platform using Infrastructure as Code, DevOps pipelines, and a migration to new vSphere infrastructure. Deployments are now predictable, and disaster recovery procedures have been implemented and tested.

  • Test pipeline reduced from 2.5 minutes to 30 seconds per image: At a major automaker, slow uploads of OpenStack images were slowing down testing. Our engineer had the images written directly to Ceph, thereby bypassing the upload process. Image creation time dropped from 2.5 minutes to 30 seconds, developers receive feedback faster, and more tests are running through the pipeline.

Together with our partners

About SUE

Modernize the code. Optimize the cloud. Run the platform.

SUE is a Dutch cloud native solutions partner that modernizes mission-critical applications, reduces cloud costs, and manages your platform. Specialists in Linux, Kubernetes, and the cloud.

More about SUEView Our Approach

29+

Years Experience

150+

Engineers and consultants

1.150+

Certifications

ISO

9001 & 27001

500+

Projects

75+

Research papers
A person is writing on a whiteboard
Our customers

Partner of progressive organizations

Thales Logo
NXP Logo
Huisman Equipment Logo
Rijk Zwaan logo

Frequently asked questions

All frequently asked questions
Start by taking inventory of everything connected to the OT network, because you can’t secure what you don’t know about. Next, divide machines and systems into zones according to IEC 62443, and allow traffic between zones only via fixed, controlled connections. Data to MES, ERP, or the cloud travels through an intermediate zone, not directly from the machine. SUE exposes machines using the Cilium Egress Gateway, with fixed outbound IP addresses per workload and without physical NAT routers.
As of September 11, 2026, you must actively report actively exploited vulnerabilities in your products within 24 hours (early warning) and 72 hours (notification) via ENISA’s reporting platform. Starting December 11, 2027, the full requirements will take effect, including vulnerability management during the support period. To comply, you must know which software components are included in each product, and that starts in your CI/CD pipeline.
The edge handles tasks that must continue even if the connection is lost or that require a response within milliseconds: data collection from machines, vision inference on the production line, and data buffering. Real-time control remains on the PLC. The cloud handles tasks that require significant computing power or storage but aren’t real-time: model training, cross-factory analyses, and long-term storage. With GitOps, you manage both using the same approach.
If your computing demand spikes around projects or releases, or if your on-premises cluster needs to be replaced, cloud HPC can handle those spikes without requiring you to purchase hardware specifically for peak demand; for constant, high workloads, on-premises solutions may remain more cost-effective. With SUE, NXP migrated its HPC environment to AWS.
Yes. MES vendors such as Critical Manufacturing provide their application layer as containers for Kubernetes, OpenShift, AKS, and EKS. Run the cluster on-premises at each factory so that operations continue uninterrupted if the connection to the cloud or headquarters is lost. With multiple nodes and rolling updates, you can implement updates without halting production. Databases and some components often still run on Windows servers outside the cluster; be sure to include these in your design.

Discuss your situation with an expert

Jonah Sanderse
Jonah Sanderse

Let’s talk


Discuss your situation with an expert

* required

By submitting this form, you confirm that you have read and understood our privacy statement.
SUE Cloud Native Solutions
Privacy overview
This website uses cookies. We use cookies to ensure that our website and services function properly, to gain insight into the use of our website, and to improve our products and marketing. For more information, please read our privacy and cookie policy.