Anticipatory · Adaptive · Prescriptive
For those who care for all of us.
A community only remains capable of acting as long as its load-bearing functions do. We develop, harden and operate adaptive, anticipatory technologies for care and essential services, secure infrastructures, forward-looking economic management, and a public capable of sound judgement.
If one fails, the whole no longer carries. Select a support to see which function it bears — and which product secures it.
Each product secures a load-bearing function.
Not a portfolio of opportunities, but four answers to the same question: what has to hold for a community to remain capable of acting?
Kea WFMWorkforce management for the care sector
Keeps organisation and productivity viable under staff shortage: mathematically grounded duty scheduling, versioned legal compliance for all 16 German federal states, audit-proof documentation. Measurable fairness counters the loss of skilled staff. Eligible for funding, e.g. under § 8 Abs. 8 SGB XI.
More → technicalRadiusOneNetwork security as a monthly service
Secures the infrastructure of those who deliver critical services — from care homes to NIS2-regulated SMEs. Access control and network hardening without an in-house security team, at a predictable monthly rate, extensible with Security+ and incident cover. Network transparency included.
More → economicRENAnalytics of economic viability
Secures the economic viability of companies and operators that carry value creation and critical services. Four levels of traceability: no black-box forecasts, but substantiated options for action.
More → informationalDaaticaMulti-perspective manuscript and text analysis
Strengthens the judgement of those who decide what gets read: discusses manuscripts and legal documents from different positions, anticipates reception and objections, makes editorial work more productive — so that good works do not fail for the wrong context. For publishers, editorial offices and law firms.
More →The products operate. The services harden.
Before technology can carry, what it stands on must be verified. Our services are the usual entry point — from an assessment in a care home to forensics after an incident.
Security consulting & assessments
A structured stocktake of IT, organisation and processes — for care homes, clinics and SMEs. The result: a prioritised, economically justified list of measures instead of a mountain of paper.
IT/OT penetration testing
Controlled attacks on networks, applications and operational technology — including where medical devices, building automation and IT interlock. Findings with context and countermeasures, never just alarms.
Incident response & digital forensics
When something has happened: contain the incident, preserve evidence, reconstruct the course of events — documented to stand up in court. On request including the tracing of crypto payment flows, e.g. after ransomware or fraud.
NIS2 & regulatory guidance
From quick check to implementation: clarify applicability, prioritise obligations, build up evidence — in the order that makes economic sense. Also for DORA and sector-specific requirements; for facilities under § 8 Abs. 8 SGB XI.
Most engagements turn into a steady state: what the assessment finds, the test hardens — and what has been hardened, our products keep operating.
Create options for action before the situation forces them.
Three stages, one direction — from recognising through adapting to acting. Every one of our products passes through them.
Anticipatory
Recognise developments before they occur: staffing bottlenecks, attack surfaces, economic imbalances, reception risks. For us, foresight is not an add-on — it is the starting point.
Adaptive
Systems that adapt to the situation instead of failing at it: duty rosters that respond to absences; networks that harden themselves; models that keep learning with reality.
Prescriptive
Not just showing what is — but substantiating what to do. Every analysis ends in traceable options for action, never in a black box.
Traceability is not an extra but a design principle: whoever is supposed to act must be able to understand why.
Does regulation affect you? The NIS2 quick check creates clarity in short order.
For a fixed price we assess whether and how your company falls under the NIS2 obligations — and what the most economical order of next steps is. No consulting marathon; a clear results document. Where DORA, KRITIS evidence or sector-specific requirements come on top, we accompany the implementation as well.
A deep-tech boutique from Berlin, built on the provable.
Novum Analytica develops hardware and software for environments in which technology carries real responsibility — physical as well as financial. Our systems do not emerge from frameworks but from mathematics, physics and computer science: optimisation with provable properties, measurable fairness, cryptographically secured traceability.
The fields of application span both worlds: cyber-physical environments — building automation, medical devices, laboratory environments, robotics — as well as banks, insurers and service providers, whom we support with information security, assessments and quantitative methods. The products above come from the same workbench: the same methods — delivered once as a service, operated once as a product.
We are a boutique by choice: small enough to stand personally behind every commitment — deep enough to solve problems where generalists fail. Founded and led by two computer scientists, a physicist and a mathematician.
What we promise, we can derive. What we cannot derive, we do not promise.
- Headquarters
- Berlin, Germany — part of the J137 GmbH Group
- Foundation
- Mathematics, physics, computer science, formal methods
- Technologies
- Physical AI — AI in cyber-physical systems, AI-supported analytics, semi-autonomous systems, cryptography, OT security — with humans in charge
- Way of working
- Develop → Harden → Operate. Traceability as a design principle.
- Publications
- Specialist monographs, conference talks, our own publication platform
- Data residency
- Your choice: on-premises at your site, or operated with country isolation — on request exclusively in Germany or Switzerland. Data processing under the GDPR.