COD 3.1: ISMS, Firewall VPN, and PKI. The End of Tool Hell

Let's be honest: who enjoys Excel spreadsheets for ISO 27001, separate tools for VPN management, and a PKI you can only understand with three manuals in hand? Nobody.

That's why COD with version 3.1 (04/2026) takes the next logical step. We have massively expanded the platform so you can manage your infrastructure and compliance in one central place, without media breaks and without unnecessary complexity.

This is probably our biggest achievement in this version. We deliver a full-fledged Information Security Management System in accordance with ISO 27001:2022 and BSI 200-3. We built the module cleanly on its own PostgreSQL database so your compliance data stays secure and separate.

• Risk Assessment & Threats: Asset-based, versioned, and shipping with the BSI defaults.
• SoA & Policies: 93 controls right in the tool. We built in a Markdown editor with split-pane preview so writing policies no longer hurts.
• Audit Log: Everything is "append-only" and protected against tampering by DB triggers. A dream for any auditor.

The firewall module has grown up. In 3.1 you get not just a new dashboard for status and firmware levels, but full VPN management:

• Vendor-agnostic: Whether WireGuard, OpenVPN, or IPsec: you manage everything centrally.
• Topology view: Finally see what talks to what.
• Heads-up, Rules Editor: The Rules Editor in 3.1 is experimental. It works directly via SSH. Before you use it in a production network: please test it extensively in staging. One mistake on apply and the firewall is gone. None of us want that.

We gave the NAC module a full-fledged Certificate Authority (CA) . RSA, ECDSA, or EdDSA? Take your pick. You can issue leaf certificates, generate CRLs, and sync everything directly with FreeRADIUS. If you have an existing PKI: import via CSV or DB-managed export is on board as well.

Technically, 3.1 is a real powerhouse. We moved the frontend to Angular 21 (zoneless) and switched the database logic entirely to Prisma instead.

• Performance: Thanks to Signals and computed() chains, the UI is lightning fast.
• Security: Sensitive fields (passwords, SNMP communities) are now excluded from queries by default.
• Clean Code: The migration into the Nx monorepo is complete. Backend and frontend now live together efficiently.

We won't leave you out in the rain. Under scripts/ you'll find everything you need to upgrade from >= v2.2.7. Check MIGRATION.md: it walks you through everything step by step.

If you'd like to see how the ISMS module or the new VPN management perform in practice: get in touch. We'll gladly show you COD 3.1 in action.

Schedule a demo