GridGate Guard addresses cybersecurity risks of Distributed Energy Resources (DER) that are typically connected to manufacturer cloud platforms and managed through heterogeneous channels.
Project Objectives
The project addresses cybersecurity risks in distributed energy by introducing a practical governance layer between DER assets and external services.
- Restore operator control over remote access to Distributed Energy Resources
- Introduce a vendor-agnostic security boundary
- Enable secure coexistence with EMS, SCADA and manufacturer clouds
- Reduce systemic cyber risk in small and medium-scale installations
Challenge
The rapid deployment of Distributed Energy Resources has increased dependence on manufacturer cloud platforms and third-party remote channels. Asset owners often rely on administrative access paths outside their direct governance, creating fragmented responsibility and limited visibility.
- remote commands may bypass local policies
- security updates depend on external processes
- constrained incident response
- blurred stakeholder responsibilities
Approach
GridGate Guard establishes a controlled boundary between DER devices and external services without replacing EMS optimisation or manufacturer platforms.
- authentication and command mediation
- independent audit and logging
- owner-defined policy enforcement
- multi-vendor compatibility
Expected Impact
• Reduced systemic cyber risk
• Clearer responsibility model
• NIS2-aligned controls
• Replicable EU architecture
Pilot Framework
• Multiple inverter and BESS brands
• With and without third-party EMS
• Local internet and manufacturer clouds
• Real operational assets in Estonia
Consortium
• Academical partners TBD (University of Tartu / Tallinn University of Technology)
• One national importer
• One national installer
• EMS technology partner
• Public sector cooperation
Project concept under preparation for the Digital Europe Programme.