{"id":33184,"date":"2025-12-04T07:00:00","date_gmt":"2025-12-04T06:00:00","guid":{"rendered":"https:\/\/highest-darmstadt.de\/news\/uncategorized\/zuflucht-fuer-kleine-computer\/"},"modified":"2025-12-10T12:30:12","modified_gmt":"2025-12-10T11:30:12","slug":"refuge-for-small-computers","status":"publish","type":"post","link":"https:\/\/highest-darmstadt.de\/en\/news\/sucess-story-en\/refuge-for-small-computers\/","title":{"rendered":"Refuge for small computers"},"content":{"rendered":"\n\n\n\n

<\/p>\n\n\n\n\n

\n
\n
\n
\n
\n
\n\n \n \n
\n
\n

\n SANCTUARY Systems: Three Darmstadt researchers make critical computers secure <\/h3>\n <\/div>\n <\/div>\n \n \n \n \n \n \n \n \n
\n\n \n
\n
\n
\n
\n
\n
\n
\n
\n

The TUDa start-up SANCTUARY Systems develops security software for embedded systems \u2013 the invisible computers in cars, satellites, and production facilities. Founded in 2023 as a spin-off from system security research at TU Darmstadt, the 16-member team is holding its own in a fiercely competitive cybersecurity market, where thousands of providers around the world compete for customers, capital, and talent. Their clients already include organizations such as the European Space Agency as well as companies from the defense industry and Industry 4.0. Founders Dr. Emanuel Stapf, Dr. Ferdinand Brasser, and Dr. Patrick Jauernig rely on deep research expertise, close ties to the university \u2013 and a genuine enjoyment of solving highly complex security problems. Routine tasks? Not really SANCTUARY\u2019s thing.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

<\/div>\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n
<\/div>\n <\/div>\n \n \n \n \n \n \n <\/div>\n\n \n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n\n\n
\n
\n
\n
\n\n \n \n
\n
\n\n \n \n
\n
\n
\n
\n
\n \n \"Gruender-Foto\"\n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n
\n
\n

\n Successful in the cybersecurity business: The founders of SANCTUARY Systems, Dr. Emanuel Stapf, Dr. Ferdinand Brasser, and Dr. Patrick Jauernig (from left to right). Image: \u00a9 SANCTUARY <\/p>\n <\/div>\n <\/div>\n <\/div>\n \n \n <\/div>\n\n \n <\/div>\n\n \n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n\n\n\n\n\n

\n
\n
\n
\n
\n
\n\n \n \n \n \n \n
\n\n \n \n \n \n
\n

The name says it all: SANCTUARY Systems builds sanctuaries \u2013 not for people, but for small computers. The Darmstadt start-up develops software that makes embedded systems more resilient against cyberattacks. These systems, for example, control brakes in cars, valves in factories, or onboard computers in satellites. If one of these systems fails, the consequences are more serious than just a simple restart.<\/p>\n

The founders operate in a growing market. Worldwide, cybersecurity revenues have been increasing for years by high single- to double-digit percentages. Cloud computing, remote work, the Internet of Things \u2013 all of it needs protection. At the same time, thousands of providers are entering the market, from global platform corporations to tiny start-ups in niche areas. On top of that, there is a massive shortage of skilled professionals. Companies are competing not only for customers but also for every qualified developer and expert \u2013 a true \u201cwar for talent.\u201d And right in the middle of it all: SANCTUARY Systems.<\/p>\n <\/div>\n \n \n \n <\/div>\n\n \n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n\n\n

\n
\n
\n
\n\n \n \n
\n
\n\n \n \n
\n
\n
\n
\n
\n \n \"Space_Messe\"\n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n
\n
\n

\n SANCTUARY Systems GmbH at the Space Tech Expo Europe 2025 in Bremen: David Koisser and Dr. Patrick Jauernig demonstrate the importance of security for Europe\u2019s space infrastructure \u2013 in exchange with experts from aerospace, research, and safety-critical sectors. Image: \u00a9 SANCTUARY <\/p>\n <\/div>\n <\/div>\n <\/div>\n \n \n <\/div>\n\n \n <\/div>\n\n \n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n\n\n

\n
\n
\n
\n
\n
\n\n \n \n \n \n \n
\n\n \n \n \n \n
\n
\n
\n
\n
\n
\n
\n
\n

The young company is holding its own in this environment because it focuses on a challenging but crucial market niche: embedded systems with high security requirements. \u201cWe protect systems where a successful attack is not just annoying, but potentially dangerous,\u201d says co-founder Dr. Emanuel Stapf. \u201cIt pays off that we have spent years researching exactly these issues.\u201d<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n <\/div>\n \n \n \n <\/div>\n\n \n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n\n\n

\n
\n
\n
\n
\n
\n\n \n \n \n \n \n
\n\n \n \n
\n
\n
\n
\n
\n
\n
\n
\n

From PhD to Entrepreneurship<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n <\/div>\n \n \n \n \n \n <\/div>\n\n \n \n \n \n \n \n \n

\n\n \n \n \n \n
\n

The story of SANCTUARY begins at the Department of Computer Science at TU Darmstadt. There, the three future founders complete their PhDs in the Systems Security research group: Emanuel Stapf, Ferdinand Brasser, and Patrick Jauernig. Their professor, Ahmad-Reza Sadeghi, is one of Germany\u2019s leading experts in computer security. In 2019, as part of a research project, the three develop software designed to better protect embedded computers from attacks. The academic community responds positively, and industry takes notice.<\/p>\n

Suddenly, the idea is on the table: this could be more than just a publication. \u201cWe realized that our ideas didn\u2019t stay in the ivory tower\u2014they solved real problems,\u201d says Dr. Ferdinand Brasser. \u201cThe step to starting our own company was big, but it made perfect sense.\u201d<\/p>\n <\/div>\n \n \n \n <\/div>\n\n \n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n\n\n

\n
\n
\n
\n
\n
\n\n \n \n \n \n \n
\n\n \n \n \n \n
\n
\n
\n
\n
\n
\n
\n
\n

This becomes possible thanks to the federal government\u2019s StartupSecure funding program. The team receives financial support and coaching. In 2021, SANCTUARY wins a start-up competition, and in 2023, the official spin-off from TU Darmstadt follows: SANCTUARY Systems GmbH is founded. \u201cWithout the StartupSecure support, we would have started much more slowly,\u201d says Dr. Patrick Jauernig. \u201cIt gave us the breathing room to turn research code into a robust product.\u201d<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n

<\/div>\n <\/div>\n \n \n \n <\/div>\n\n \n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n\n\n
\n
\n
\n
\n\n \n \n
\n
\n\n \n \n
\n
\n
\n
\n
\n \n \"Isolierte\n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n \n \n <\/div>\n\n \n <\/div>\n\n \n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n\n\n
\n
\n
\n
\n
\n
\n\n \n \n \n \n \n
\n\n \n \n
\n
\n
\n
\n
\n
\n
\n
\n

How SANCTUARY Protects Systems<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n <\/div>\n \n \n \n \n \n \n \n \n

\n

At the core of SANCTUARY\u2019s offering is the \u201cZero-Trust Platform\u201d (ZTP). It addresses a very specific problem: in modern vehicles, spacecraft, or machinery, numerous software components from different manufacturers run on the same hardware. If one of these components is hacked, it can, in the worst case, compromise the entire system. The ZTP strictly separates these components. Each runs in its own protected environment and is assigned a unique digital identity. The platform monitors communications, consolidates key functions such as software updates, and ensures that only authorized components can communicate with each other.<\/p>\n

At the heart of the system is the Peregrine Hypervisor, an extremely lightweight, security-focused \u201cmini operating system kernel\u201d that isolates programs from each other and continuously monitors them. It is complemented by a security agent that manages keys for secure connections and keeps track of the overall system state.<\/p>\n

The technology is highly complex, but that\u2019s exactly what the team loves. \u201cStandard requirements bore us,\u201d says Jauernig with a smile. \u201cWe want problems that really challenge us\u2014critical systems, limited resources, strict regulations. When it gets truly difficult, that\u2019s when we\u2019re in our element.\u201d<\/p>\n <\/div>\n \n \n \n <\/div>\n\n \n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n\n\n

\n
\n
\n
\n
\n
\n\n \n \n \n \n \n
\n\n \n \n
\n
\n
\n
\n
\n
\n
\n
\n

Satellites, defense networks, factories<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n <\/div>\n \n \n \n \n \n \n \n \n

\n

SANCTUARY takes its first major steps where the stakes are highest: in space. The company is working with the European Space Agency (ESA) on several projects, focusing on secure communication between satellites, protecting onboard computers, and emergency systems in case something goes wrong in spacecraft. \u201cA satellite taken over by attackers is not just a broken computer,\u201d says Stapf. \u201cIt\u2019s infrastructure in space. If we can help there with our technology, that\u2019s an enormous responsibility.\u201d<\/p>\n

SANCTUARY is also active in manufacturing companies. In industry, more and more machines are becoming interconnected \u2013 the buzzword is Industry 4.0. Many companies still document their connected devices and security status manually. This is slow, expensive, and prone to errors. That\u2019s why SANCTUARY is developing another product: SANCTUARY Insight. The tool automatically identifies devices in factories, assigns them to categories, reads relevant security information, and assesses their condition. Vulnerabilities become visible before they can be exploited. The tool also helps close these gaps. It is currently being tested with research institutions and industry partners, with a market launch coming soon.<\/p>\n <\/div>\n \n \n \n <\/div>\n\n \n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n\n\n

\n
\n
\n
\n
\n
\n\n \n \n \n \n \n
\n\n \n \n
\n
\n
\n
\n
\n
\n
\n
\n

Research, Practice \u2013 and a Board from Academia<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n <\/div>\n \n \n \n \n \n \n \n \n

\n

Proximity to academia remains a central element even after the spin-off. SANCTUARY originated at TU Darmstadt and continues to work closely with the university. Students write their theses in cooperation with the start-up, work as student assistants on the team, and bring new ideas from current research. \u201cWe may no longer be in the university building, but mentally we\u2019re just five minutes away,\u201d says Brasser. \u201cTU is a huge pool of ideas and talent at the same time.\u201d<\/p>\n

Professor Ahmad-Reza Sadeghi advises the company. He brings not only scientific excellence but also experience from numerous industry projects\u2014a crucial signal in a market where trust and reputation are key.<\/p>\n <\/div>\n \n \n \n <\/div>\n\n \n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n\n\n

\n
\n
\n
\n\n \n \n
\n
\n\n \n \n
\n
\n
\n
\n
\n \n \"Loewe3-Ministerbesuch\"\n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n
\n
\n

\n New office space found at the Technology and Innovation Center (TIZ): The founding team of SANCTUARY Systems GmbH has grown by 13 employees \u2013 more are urgently needed. Image: \u00a9 Petra A. Killick <\/p>\n <\/div>\n <\/div>\n <\/div>\n \n \n <\/div>\n\n \n <\/div>\n\n \n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n\n\n

\n
\n
\n
\n
\n
\n\n \n \n \n \n \n
\n\n \n \n
\n
\n
\n
\n
\n
\n
\n
\n

Team, Location, and the War for Talent<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n <\/div>\n \n \n \n \n \n \n \n \n

\n

After its founding, SANCTUARY initially found a home in the HUB31 start-up and technology center. Today, the team is based in the Technology and Innovation Center (TIZ) on Robert-Koch-Stra\u00dfe in Darmstadt\u2014still at the heart of an ecosystem of research, technology, and start-ups. Currently, 16 employees work for SANCTUARY Systems, many of them from the former research group. The company is constantly looking for more bright minds\u2014full-time, part-time, or for theses.<\/p>\n

The competition for talent is fierce. Millions of cybersecurity professionals are missing worldwide. Salaries are rising, and companies are outbidding each other. Here too, SANCTUARY competes directly with large corporations. \u201cWe can match corporate salaries,\u201d says Stapf. \u201cAnd we offer something many talents are looking for: real responsibility, visible impact, and an environment where they work at the cutting edge of technology.\u201d<\/p>\n <\/div>\n \n \n \n <\/div>\n\n \n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n\n\n

\n
\n
\n
\n
\n
\n\n \n \n \n \n \n
\n\n \n \n
\n
\n
\n
\n
\n
\n
\n
\n

A Competitive Market, a Clear Focus<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n <\/div>\n \n \n \n \n \n \n \n \n

\n

Why can a young team from Darmstadt hold its own in this environment? First: specialization. SANCTUARY focuses clearly on embedded systems and industrial as well as safety-critical applications\u2014no broad, general \u201csecurity for everything.\u201d Second: depth. The founders have shaped the field of systems security in Germany over many years, published numerous papers at top conferences, and supported many industry projects. This expertise flows directly into their products. Third: references. Collaborations with organizations like the ESA build trust.<\/p>\n

And last but not least: the momentum from funding. Support from StartupSecure, along with other awards and projects, has helped them manage certifications, compliance requirements, and first customers\u2014hurdles that often trip up young providers. \u201cThere\u2019s a lot of noise in the cybersecurity market,\u201d says Jauernig. \u201cWe try not to be the loudest, but to solve the problems where failure is not an option.\u201d<\/p>\n <\/div>\n \n \n \n <\/div>\n\n \n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n\n\n

\n
\n
\n
\n
\n
\n\n \n \n \n \n \n
\n\n \n \n
\n
\n
\n
\n
\n
\n
\n
\n

Where the Journey Is Headed<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n

<\/div>\n <\/div>\n \n \n \n \n \n \n \n \n
\n
\n
\n
\n
\n
\n
\n
\n

The threat landscape is becoming more complex. Attackers are using artificial intelligence, targeting entire supply chains, and striking critical infrastructure. At the same time, more and more connected devices are entering every aspect of life\u2014from networked cars to chemical plants. SANCTUARY is already working on new projects such as PlantProtect, which combines the device and risk management of SANCTUARY Insight with an AI-based anomaly detection system to identify attacks on, for example, chemical facilities at an early stage.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n

<\/div>\n <\/div>\n \n \n \n <\/div>\n\n \n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n\n\n
\n
\n
\n
\n\n \n \n
\n
\n\n \n \n
\n
\n
\n
\n
\n \n \"Loewe3-Ministerbesuch\"\n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n
\n
\n

\n Kickoff for cybersecurity in the process industry: Hessian Minister of Science Timon Gremmels personally hands over the funding contract for the research project \u201cPlantProtect \u2013 Asset-Based Cyberattack Prevention and Detection for the Process Industry\u201d to SANCTUARY Systems GmbH. Together with the University of Kassel, Department of Measurement and Control Engineering, the Darmstadt-based company will develop three new protection mechanisms for industrial production facilities as part of the LOEWE funding program. Image: \u00a9 Petra A. Killick <\/p>\n <\/div>\n <\/div>\n <\/div>\n \n \n <\/div>\n\n \n <\/div>\n\n \n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n\n\n

\n
\n
\n
\n
\n
\n\n \n \n \n \n \n
\n\n \n \n \n \n
\n

International markets are increasingly in focus, with trade shows and collaborations set to further expand the business. \u201cWe come from research,\u201d says Stapf. \u201cBut in the end, it\u2019s about keeping facilities running, satellites controllable, and people safe. If we contribute to that, we\u2019ve done our job.\u201d<\/p>\n

SANCTUARY Systems is thus more than just another start-up in a crowded market. It is an example of how university research, government funding, and entrepreneurial courage can work together\u2014and how an idea in the lab can become a company that protects critical parts of our digital world.<\/p>\n <\/div>\n \n \n \n <\/div>\n\n \n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n\n\n

\n
\n
\n
\n
\n
\n\n \n \n \n \n \n
\n\n \n \n \n \n
\n
\n
\n
\n
\n
\n
\n
\n

Author: Heike J\u00fcngst<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n <\/div>\n \n \n \n <\/div>\n\n \n \n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

SANCTUARY Systems: Three Darmstadt researchers make critical computers secure<\/p>\n","protected":false},"author":6,"featured_media":32964,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[540],"tags":[1733,773,1820,1821,607,579],"class_list":["post-33184","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sucess-story-en","tag-cybersicherheit-en","tag-digitalisierung-en","tag-sanctuary","tag-sicherheitssoftware","tag-start-up-en","tag-tudarmstadt-en"],"acf":[],"_links":{"self":[{"href":"https:\/\/highest-darmstadt.de\/en\/wp-json\/wp\/v2\/posts\/33184","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/highest-darmstadt.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/highest-darmstadt.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/highest-darmstadt.de\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/highest-darmstadt.de\/en\/wp-json\/wp\/v2\/comments?post=33184"}],"version-history":[{"count":4,"href":"https:\/\/highest-darmstadt.de\/en\/wp-json\/wp\/v2\/posts\/33184\/revisions"}],"predecessor-version":[{"id":33192,"href":"https:\/\/highest-darmstadt.de\/en\/wp-json\/wp\/v2\/posts\/33184\/revisions\/33192"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/highest-darmstadt.de\/en\/wp-json\/wp\/v2\/media\/32964"}],"wp:attachment":[{"href":"https:\/\/highest-darmstadt.de\/en\/wp-json\/wp\/v2\/media?parent=33184"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/highest-darmstadt.de\/en\/wp-json\/wp\/v2\/categories?post=33184"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/highest-darmstadt.de\/en\/wp-json\/wp\/v2\/tags?post=33184"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}