COD 3.1: ISMS, Firewall VPN, and PKI – The End of Tool Hell

Let's be honest: who enjoys Excel spreadsheets for ISO 27001, separate tools for VPN management, and a PKI you can only understand with three manuals in hand? Nobody.

That's why COD with version 3.1 (04/2026) takes the next logical step. We have massively expanded the platform so you can manage your infrastructure and compliance in one central place – without media breaks and without unnecessary complexity.

This is probably our biggest achievement in this version. We deliver a full-fledged Information Security Management System in accordance with ISO 27001:2022 and BSI 200-3. We built the module cleanly on its own PostgreSQL database so your compliance data stays secure and separate.

• Risk Assessment & Threats: Asset-based, versioned, and shipping with the BSI defaults.
• SoA & Policies: 93 controls right in the tool. We built in a Markdown editor with split-pane preview so writing policies no longer hurts.
• Audit Log: Everything is "append-only" and protected against tampering by DB triggers. A dream for any auditor.

The firewall module has grown up. In 3.1 you get not just a new dashboard for status and firmware levels, but full VPN management:

• Vendor-agnostic: Whether WireGuard, OpenVPN, or IPsec – you manage everything centrally.
• Topology view: Finally see what talks to what.
• Heads-up, Rules Editor: The Rules Editor in 3.1 is experimental. It works directly via SSH. Before you use it in a production network: please test it extensively in staging. One mistake on apply and the firewall is gone – none of us want that.

We gave the NAC module a full-fledged Certificate Authority (CA) . RSA, ECDSA, or EdDSA? Take your pick. You can issue leaf certificates, generate CRLs, and sync everything directly with FreeRADIUS. If you have an existing PKI: import via CSV or DB-managed export is on board as well.

Technically, 3.1 is a real powerhouse. We moved the frontend to Angular 21 (zoneless) and switched the database logic entirely to Prisma instead.

• Performance: Thanks to Signals and computed() chains, the UI is lightning fast.
• Security: Sensitive fields (passwords, SNMP communities) are now excluded from queries by default.
• Clean Code: The migration into the Nx monorepo is complete – backend and frontend now live together efficiently.

We won't leave you out in the rain. Under scripts/ you'll find everything you need to upgrade from >= v2.2.7. Check MIGRATION.md – it walks you through everything step by step.

If you'd like to see how the ISMS module or the new VPN management perform in practice: get in touch. We'll gladly show you COD 3.1 in action.

Schedule a demo