---
title: "Areas: Security and trust | Nexus Observatory"
description: "Areas of the Security and trust platform: Identity and attestation, Keys and PKI, Segmentation and zero trust and OT and wireless security."
url: https://observatory.global/security-trust/areas/
publisher: Nexus Observatory Inc.
updated: 2026-11-07
---

[Nexus Observatory](https://observatory.global/)

/

[Security and trust](https://observatory.global/security-trust/)

/

**Areas** 

# Security and trust, area by area.

Each area of the platform has its own page: the systems in it, the standards it is drawn against, the industries it serves and how we deliver it.

[Plan with us](https://observatory.global/security-trust/contact/deployment/)

[Technologies](https://observatory.global/security-trust/technologies/)

Areas · **5** Technologies · **61** Industries · **5** 

At a glance

## Identity and attestation

Hardware roots of trust, quotes checked at every join. The page on identity and attestation sets out the technologies it uses, the standards they follow and how we deliver it. Hardware-rooted identity and attestation at every join, PKI, secure boot and signed updates, segmentation between nodes, tenants and sites, operational-technology and wireless security, monitoring and response, and the move to post-quantum keys, planned before it is forced.

The problem

### Every node proves what it is

The products and services of Security and trust start with identity and attestation, keys and PKI, segmentation and zero trust and OT and wireless security. Hardware-rooted identity and attestation at every join, PKI, secure boot and signed updates, segmentation between nodes, tenants and sites, operational-technology and wireless security, monitoring and response, and the move to post-quantum keys, planned before it is forced.

Components

- Pole-mounted edge gateway node
- Fixed gas detectors on a drift wall
- Particulate monitoring station and sensor node
- Overhead line sensor on a distribution span
- Private LTE mast on a solar skid
- "AI tower in a box"
- Hardware security module, 1U, in an edge rack
- Data hall row pair with cold-aisle containment

Interfaces

**Instruments**: SDI-12 · RS-485 / Modbus RTU · 4–20 mA
**Radio**: Ethernet · LTE-M / NB-IoT · LoRaWAN
**Time and position**: GNSS 1PPS
**Security**: TPM 2.0
**Publishing**: MQTT

Where it works

- Monitoring and response
- OT and wireless security

In the story below

1. The system, part by part
2. Assembly
3. Installation
4. Deployment
5. Connections
6. Operation
7. Failure and recovery
8. Scale and federation
9. What you get

Scenes · 13

Next steps

[Plan a deployment](https://observatory.global/security-trust/contact/deployment/)

[Open the Field Deployment Studio](https://observatory.global/studio/)

[See Security and trust](https://observatory.global/security-trust/)

[See Keys and PKI](https://observatory.global/security-trust/keys-and-pki/)

1. Security and trust · Areas Every node proves what it is The products and services of Security and trust start with identity and attestation, keys and PKI, segmentation and zero trust and OT and wireless security. Hardware-rooted identity and attestation at every join, PKI, secure boot and signed updates, segmentation between nodes, tenants and sites, operational-technology and wireless security, monitoring and response, and the move to post-quantum keys, planned before it is forced.
2. Area · Identity and attestation Identity and attestation Hardware roots of trust, quotes checked at every join. The page on identity and attestation sets out the technologies it uses, the standards they follow and how we deliver it. Hardware-rooted identity and attestation at every join, PKI, secure boot and signed updates, segmentation between nodes, tenants and sites, operational-technology and wireless security, monitoring and response, and the move to post-quantum keys, planned before it is forced. [See Identity and attestation](https://observatory.global/security-trust/identity-and-attestation/)
3. Area · Monitoring and response Monitoring and response Detect, contain, recover, with the evidence kept. The page on monitoring and response sets out the technologies it uses, the standards they follow and how we deliver it. Hardware-rooted identity and attestation at every join, PKI, secure boot and signed updates, segmentation between nodes, tenants and sites, operational-technology and wireless security, monitoring and response, and the move to post-quantum keys, planned before it is forced. [See Monitoring and response](https://observatory.global/security-trust/monitoring-and-response/)
4. Area · Segmentation and zero trust Segmentation and zero trust Least privilege between nodes, tenants and sites. The page on segmentation and zero trust sets out the technologies it uses, the standards they follow and how we deliver it. Hardware-rooted identity and attestation at every join, PKI, secure boot and signed updates, segmentation between nodes, tenants and sites, operational-technology and wireless security, monitoring and response, and the move to post-quantum keys, planned before it is forced. [See Segmentation and zero trust](https://observatory.global/security-trust/segmentation-and-zero-trust/)
5. Area · OT and wireless security OT and wireless security Field networks, 5G and the software supply chain. The page on OT and wireless security sets out the technologies it uses, the standards they follow and how we deliver it. Hardware-rooted identity and attestation at every join, PKI, secure boot and signed updates, segmentation between nodes, tenants and sites, operational-technology and wireless security, monitoring and response, and the move to post-quantum keys, planned before it is forced. [See OT and wireless security](https://observatory.global/security-trust/ot-and-wireless-security/)
6. Time and place When and where, on every record On a network for Security and trust, when and where are part of every record: a disciplined clock, from satellite time or a PTP grandmaster, and the station's surveyed position. A degraded clock or position is written into the record for Security and trust, never hidden, and every user downstream sees the same flag.
7. Area · Keys and PKI Keys and PKI Issuance, rotation and post-quantum migration. The page on keys and PKI sets out the technologies it uses, the standards they follow and how we deliver it. Hardware-rooted identity and attestation at every join, PKI, secure boot and signed updates, segmentation between nodes, tenants and sites, operational-technology and wireless security, monitoring and response, and the move to post-quantum keys, planned before it is forced. [See Keys and PKI](https://observatory.global/security-trust/keys-and-pki/)
8. Trust Proved before it is trusted Every node on a network for Security and trust proves what it is before it is admitted, by answering an attestation challenge from its hardware root of trust. From then on, its keys stay in secure hardware, its software is signed, and every record it makes for Security and trust can be traced to it.
9. Evidence Standards an auditor can check An auditor of a network for Security and trust finds metadata to WIGOS and ISO 19115, observations through OGC SensorThings and exchange through WIS 2.0. Releases, calibrations and admissions for Security and trust are kept as signed records, so every claim can be checked against the standard behind it.
10. Failure and recovery When a node fails, the fleet knows first When something fails on a network for Security and trust, the fleet knows first: the node buffers its data and fails over to a second link where one exists. The alert for Security and trust carries what a responder needs to act, and the record keeps every value once, with nothing lost.
11. How it scales One base unit, repeated A network for Security and trust grows from one proven unit: a base node, its instruments, then the power and radio that make it a station. A relay turns stations into a site, a fleet repeats the site in many places, and capacity for Security and trust rises with each unit added, never by replacing what works.
12. What you get Open where it can be, contracted where it must be Anyone can use and build on the protocol, the methods and the open data behind Security and trust, free of charge. Under contract, Nexus Observatory Inc. builds and runs the sites, fleets and data tiers for Security and trust, priced per site and per fleet, with service levels written as numbers.
13. Next step Security and trust, planned with you Tell us which products and services of Security and trust you need, for which sites and by when. An engineer replies with a survey proposal, a design and a scope for Security and trust, and the plan grows from one site to the network you need. [Plan a deployment](https://observatory.global/security-trust/contact/deployment/) [Open the Field Deployment Studio](https://observatory.global/studio/) [See Security and trust](https://observatory.global/security-trust/)

More presentations

## See it from every side.

Each opens as a full-screen presentation: deeper pages on the same subject, explainers, stories, guided tours of the places, network scenes and the observatories that came before.

[All presentations](https://observatory.global/presentations/)

### In depth

[Use case **Utility grid-edge private LTE and wildfire weather**](https://observatory.global/use-cases/utility-grid-edge/)

[ISIC section · ISIC B **Mining and quarrying**](https://observatory.global/industries/b-mining-and-quarrying/)

[ISIC section · ISIC F **Construction**](https://observatory.global/industries/f-construction/)

[Sector **Industrial**](https://observatory.global/sectors/industrial/)

### Explainers

[Explainer · Industrial **Industrial** Blast vibration at the pit, fire weather at the grid edge, methane at the fenceline and tailings movement from GNSS.](https://observatory.global/industries/infrastructure/explainer/)

[Platform **Security and trust** Every unattended node is an entry point](https://observatory.global/security-trust/)

[Platform **Sensors & instruments** A number without its story](https://observatory.global/sensors/)

### Stories

[Story · Private 5G and AI-RAN **Private 5G with the inference in the radio** A private cellular network gives a site its own coverage, its own security and its own priorities. AI-RAN adds a second idea: the accelerators that run the…](https://observatory.global/stories/private-5g-ai-ran/)

[Story · Post-quantum cryptography **Cryptography that outlasts the quantum computer** Data signed today may need to be trusted in 2040. Post-quantum standards were first published in August 2024, and governments have set dates for leaving…](https://observatory.global/stories/pqc-migration/)

[Story · Timing and PNT **Time as infrastructure** A 5G cell must hold its phase within 3 µs of its neighbours, ±1.5 µs of a common reference; a synchrophasor’s one per cent vector error leaves room for only…](https://observatory.global/stories/timing-pnt/)

### Places and networks

[Guided tour · Guided 3D tour **Transmission corridor** Lattice towers carry a line across open country; conductor sensors report temperature and sag, and the substation edge brings them into the grid operator’s systems.](https://observatory.global/environments/transmission-corridor/)

[Guided tour · Guided 3D tour **Open-pit mine** GNSS slope monitors on the benches, a blast seismograph at the boundary and a private cell for the fleet, around a benched pit cut into the ground.](https://observatory.global/environments/open-pit-mine/)

[Network scene · Private 5G · Mining **Private 5G in an open-pit mine** A private network for haul trucks, drills and slope radar: a mast on the rim, a cell in the pit, the core at the plant, and coverage computed over the benches themselves.](https://observatory.global/environments/networks/private5g-mine/)

### Heritage observatories

[Heritage observatory · United States · 1994 **International GNSS Service** A voluntary federation of some two hundred agencies and universities that operate a global network of GNSS receivers and share the results, from which the precise orbits and…](https://observatory.global/observatories/igs-gnss-service/)

[Heritage observatory · Italy (historic building on the slopes of Vesuvius) · 1841 **Vesuvius Observatory** Founded in 1841 on the slope of Vesuvius, this is the oldest volcano observatory in the world.](https://observatory.global/observatories/vesuvius-observatory/)

### Interactive tools

[Interactive tool · Configure a station **Station Builder** Configure a station part by part in 3D, check the rules as you go and request a quote for the assembly.](https://observatory.global/studio/builder/)

**01** Areas

## Security and trust, area by area.

Choose an area for its systems, standards, the industries it serves and how we deliver it.

[01 Identity and attestation Hardware roots of trust, quotes checked at every join. Open the area →](https://observatory.global/security-trust/identity-and-attestation/)

[02 Keys and PKI Issuance, rotation and post-quantum migration. Open the area →](https://observatory.global/security-trust/keys-and-pki/)

[03 Segmentation and zero trust Least privilege between nodes, tenants and sites. Open the area →](https://observatory.global/security-trust/segmentation-and-zero-trust/)

[04 OT and wireless security Field networks, 5G and the software supply chain. Open the area →](https://observatory.global/security-trust/ot-and-wireless-security/)

[05 Monitoring and response Detect, contain, recover, with the evidence kept. Open the area →](https://observatory.global/security-trust/monitoring-and-response/)

**02** Open and enterprise

## Open by default. Enterprise by contract.

The open layer lives on the main site, free to use and build on. Enterprise services are delivered under contract by Nexus Observatory Inc.

Open, on the main site

- Threat model for observing sites
- Attestation profile in the protocol

Enterprise, on this site

- Operational-technology assurance
- Security monitoring for observing sites
- Key and PKI operations

**03** On this site

## Where to go next.

[Security and trust Technologies The layered map of what we build with. Open →](https://observatory.global/security-trust/technologies/)

[Security and trust Architecture Layers, functions and evidence. Open →](https://observatory.global/security-trust/architecture/)

[Security and trust Industries The industry sites built on this platform. Open →](https://observatory.global/security-trust/industries/)

[Security and trust Resources Explainer, stories, specification and forms. Open →](https://observatory.global/security-trust/resources/)

## Bring us the site.

We bring the survey, the design and the crew. The form names who receives your details.

[Plan a deployment](https://observatory.global/security-trust/contact/deployment/)

[Contact](https://observatory.global/security-trust/contact/)

[Nexus Observatory](https://observatory.global/) **Security and trust** . Every node proves what it is. [Talk to us](https://observatory.global/contact/)

Security and trust

- [Overview](https://observatory.global/security-trust/)
- [Areas](https://observatory.global/security-trust/areas/)
- [Technologies](https://observatory.global/security-trust/technologies/)
- [Architecture](https://observatory.global/security-trust/architecture/)
- [Industries](https://observatory.global/security-trust/industries/)
- [Resources](https://observatory.global/security-trust/resources/)
- [Contact](https://observatory.global/security-trust/contact/)

Platforms

- [Protocol & Grid](https://observatory.global/grid-services/)
- [Software](https://observatory.global/software/)
- [Hardware & power](https://observatory.global/hardware/)
- [Sensors & instruments](https://observatory.global/sensors/)
- [Connectivity](https://observatory.global/connectivity/)
- [Edge compute & AI](https://observatory.global/edge-ai/)
- [Earth observation & GeoAI](https://observatory.global/earth-observation/)
- [Space and satellite systems](https://observatory.global/space/)
- [Positioning, navigation and timing](https://observatory.global/pnt/)
- [Security and trust](https://observatory.global/security-trust/)
- [Digital twins and simulation](https://observatory.global/digital-twins/)
- [Data & licensing](https://observatory.global/data-products/)
- [Field services](https://observatory.global/field-services/)
- [Design and integration](https://observatory.global/integration/)
- [Test and qualification](https://observatory.global/qualification/)
- [Operations centre](https://observatory.global/operations/)
- [Training and enablement](https://observatory.global/training/)
- [Frontier labs](https://observatory.global/labs/)

Solutions

- [Early warning](https://observatory.global/use-cases/street-flood/)
- [Wildfire and fire weather](https://observatory.global/use-cases/wildfire-camera/)
- [Environmental compliance](https://observatory.global/use-cases/methane-fenceline/)
- [Asset monitoring](https://observatory.global/industries/infrastructure/)
- [Private networks](https://observatory.global/connectivity/private-5g/)
- [Remote power and sites](https://observatory.global/use-cases/remote-microgrid/)
- [Climate and resilience](https://observatory.global/industries/climate/)
- [Site twins](https://observatory.global/digital-twins/)
- [Data licensing](https://observatory.global/data-products/)

Industries

- [Public safety](https://observatory.global/industries/public-safety/)
- [Government](https://observatory.global/industries/government/)
- [Cities](https://observatory.global/industries/cities/)
- [Civil resilience](https://observatory.global/industries/resilience/)
- [Communities](https://observatory.global/industries/communities/)
- [Humanitarian](https://observatory.global/industries/humanitarian/)
- [Climate](https://observatory.global/industries/climate/)
- [Water](https://observatory.global/industries/water/)
- [Nature](https://observatory.global/industries/nature/)
- [Oceans](https://observatory.global/industries/oceans/)
- [Agriculture](https://observatory.global/industries/agriculture/)
- [Energy](https://observatory.global/industries/energy/)
- [Telecom](https://observatory.global/industries/telecom/)
- [Transport](https://observatory.global/industries/transport/)
- [Infrastructure](https://observatory.global/industries/infrastructure/)
- [Mining](https://observatory.global/industries/mining/)
- [Industry](https://observatory.global/industries/industry/)
- [Research](https://observatory.global/industries/research/)
- [Education](https://observatory.global/industries/education/)
- [Health](https://observatory.global/industries/health/)
- [Insurance and finance](https://observatory.global/industries/insurance/)
- [Events](https://observatory.global/industries/events/)

Products

- [Field Deployment Studio](https://observatory.global/studio/)
- [Station Builder](https://observatory.global/studio/builder/)
- [Field services](https://observatory.global/field-services/)
- [Data products](https://observatory.global/data-products/)
- [APIs and SDKs](https://observatory.global/protocol/developers/)
- [Edge runtime and fleet](https://observatory.global/software/)
- [Hardware catalogue](https://observatory.global/hardware/)
- [Reference designs](https://observatory.global/protocol/reference-designs/)

Resources

- [Learn](https://observatory.global/learn/)
- [Stories](https://observatory.global/stories/)
- [Presentations](https://observatory.global/presentations/)
- [Environments](https://observatory.global/environments/)
- [Network scenes](https://observatory.global/environments/networks/)
- [Observatories atlas](https://observatory.global/observatories/)
- [Earth and maps](https://observatory.global/earth/)
- [Technologies](https://observatory.global/technologies/)
- [Countries](https://observatory.global/countries/)
- [Spectrum](https://observatory.global/spectrum/)
- [Observatory Protocol](https://observatory.global/protocol/)
- [Specification](https://observatory.global/protocol/specification/)
- [Conformance](https://observatory.global/protocol/conformance/)
- [Open source](https://observatory.global/open/)
- [Data credits](https://observatory.global/credits/)

Company

- [About](https://observatory.global/about/)
- [Open governance](https://observatory.global/consortium/)
- [Security and trust](https://observatory.global/security/)
- [Careers](https://observatory.global/contact/careers/)
- [Press](https://observatory.global/contact/press/)
- [Contact sales](https://observatory.global/contact/)
- [Privacy requests](https://observatory.global/privacy-request/)

© 2026 Nexus Observatory Inc.

[Security and trust](https://observatory.global/security/)

[Privacy choices](https://observatory.global/privacy-choices/)

[Accessibility](https://observatory.global/legal/accessibility/)

[Privacy](https://observatory.global/legal/privacy/)

[Terms](https://observatory.global/legal/terms/)

[Status](https://status.observatory.global/)

[Help translate](https://observatory.global/translate/)