COD 3.1: ISMS, Firewall-VPN, and PKI – No More Tool Hell

Hand on heart: Who actually enjoys Excel sheets for ISO 27001, separate tools for VPN management, and a PKI you can only understand with three manuals in hand? Nobody.

That's why COD takes the next logical step with version 3.1 (04/2026). We've massively expanded the platform so you can manage your infrastructure and compliance in one central place — without media breaks and without unnecessary complexity.

This is probably our biggest leap in this release. We're delivering a fully featured Information Security Management System aligned with ISO 27001:2022 and BSI 200-3. We've built the module cleanly on its own PostgreSQL database so your compliance data stays secure and properly segregated.

• Risk assessment & threats: Asset-based, versioned, and shipped with the BSI defaults out of the box.
• SoA & policies: All 93 controls directly in the tool. We've baked in a Markdown editor with split-pane preview so writing policies no longer hurts.
• Audit log: Everything is append-only and tamper-protected via DB triggers. A dream for any auditor.

The firewall module has grown up. In 3.1 you not only get a new dashboard for status and firmware levels, but also full VPN management:

• Vendor-agnostic: Whether WireGuard, OpenVPN, or IPsec — you manage everything centrally.
• Topology view: Finally see what's talking to what.
• Heads up, Rules Editor: The Rules Editor is experimental in 3.1. It operates directly via SSH. Before you turn it loose on a production network: please test it thoroughly in staging. One mistake on apply and the firewall is gone — none of us want that.

We've gifted the NAC module a fully featured Certificate Authority (CA). RSA, ECDSA, or EdDSA? Take your pick. You can issue leaf certificates, generate CRLs, and sync everything directly with FreeRADIUS. Already have a PKI in place? Import via CSV or DB-managed export is on board as well.

Technically, 3.1 is a real powerhouse. We've lifted the frontend to Angular 21 (zoneless) and migrated the database logic completely to Prisma.

• Performance: Thanks to signals and computed() chains, the UI is lightning fast.
• Security: Sensitive fields (passwords, SNMP communities) are now excluded from queries by default.
• Clean code: The migration into the Nx monorepo is complete — backend and frontend now coexist efficiently.

We're not leaving you out in the rain. Under scripts/ you'll find everything you need to upgrade from >= v2.2.7. Check MIGRATION.md — every step is documented there.

If you'd like to see how the ISMS module or the new VPN management performs in practice: get in touch. We'd be happy to walk you through COD 3.1 in action.

Book a demo