feat(pitch-deck): pivot to Maschinen- und Anlagenbau target market

Refocus entire pitch deck narrative on machine/plant manufacturers with
in-house embedded software development. Key changes:

- i18n: All DE/EN texts updated (cover, problem, solution, market, etc.)
- MarketSlide: Dynamic unit formatting (Mrd/Mio/k) for SOM in millions
- SolutionSlide: Code-Security pillar with ScanLine icon
- HowItWorksSlide: GitBranch icon for code repo connection step
- CompetitionSlide: Security features reframed for firmware/embedded
- RegulatorySlide: Added CRA (Cyber Resilience Act) as 4th tab
- AI chat prompt: Updated Kernbotschaften for Maschinenbau USP
- DB migration: TAM 8.7B, SAM 850M, SOM 7.2M, customers 5-380 (2026-2030),
  4 new differentiator features, product capabilities for code-security

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

pitch-deck/components/slides/CompetitionSlide.tsx

@@ -17,20 +17,20 @@ interface CompetitionSlideProps {
 
 const securityFeatures = {
   de: [
-    { icon: ShieldCheck, title: 'DevSecOps Security Suite', desc: '6 integrierte Security-Tools fuer kontinuierliche Sicherheitsueberwachung' },
-    { icon: ScanLine, title: 'SAST & Secrets Detection', desc: 'Automatische Code-Analyse (Semgrep) + Secrets-Scanning (Gitleaks) in der CI/CD Pipeline' },
-    { icon: Bug, title: 'Container & Dependency Scanning', desc: 'Trivy + Grype scannen Container-Images und Abhaengigkeiten auf CVEs' },
-    { icon: Package, title: 'SBOM-Generator (NIS2-konform)', desc: 'CycloneDX/SPDX Software Bill of Materials fuer NIS2 und ISO 27001 Compliance' },
-    { icon: FileSearch, title: 'Software-Risikoanalyse', desc: 'Automatisierte Risikoklassifizierung fuer Embedded-Entwicklung und AI-Act-konforme Systeme' },
-    { icon: Code2, title: 'KI-Code-Assistent (1000b)', desc: 'Das Cloud-LLM unterstuetzt Entwickler bei Code-Reviews, Security-Fixes und Compliance-Dokumentation' },
+    { icon: ShieldCheck, title: 'DevSecOps Security Suite', desc: '6 integrierte Security-Tools scannen Firmware und Software Ihrer Maschinen kontinuierlich auf Schwachstellen' },
+    { icon: ScanLine, title: 'Firmware & Code Scanning', desc: 'Semgrep + Gitleaks analysieren Embedded-Code, Steuerungs-Software und CI/CD Pipelines automatisch' },
+    { icon: Bug, title: 'Container & Dependency Scanning', desc: 'Trivy + Grype scannen Container-Images und Abhaengigkeiten auf CVEs — CRA-konform dokumentiert' },
+    { icon: Package, title: 'SBOM-Generator (CRA/NIS2)', desc: 'CycloneDX/SPDX Software Bill of Materials — Pflicht fuer Hersteller unter dem Cyber Resilience Act' },
+    { icon: FileSearch, title: 'Software-Risikoanalyse', desc: 'Automatisierte Risikoklassifizierung fuer Embedded-Software, Firmware und AI-Act-konforme Steuerungssysteme' },
+    { icon: Code2, title: 'KI-Code-Assistent (1000b)', desc: 'BSI-zertifiziertes Cloud-LLM implementiert Security-Fixes, schreibt Risikoanalysen und ist fuer Mitarbeiter nutzbar' },
   ],
   en: [
-    { icon: ShieldCheck, title: 'DevSecOps Security Suite', desc: '6 integrated security tools for continuous security monitoring' },
-    { icon: ScanLine, title: 'SAST & Secrets Detection', desc: 'Automatic code analysis (Semgrep) + secrets scanning (Gitleaks) in CI/CD pipeline' },
-    { icon: Bug, title: 'Container & Dependency Scanning', desc: 'Trivy + Grype scan container images and dependencies for CVEs' },
-    { icon: Package, title: 'SBOM Generator (NIS2 compliant)', desc: 'CycloneDX/SPDX Software Bill of Materials for NIS2 and ISO 27001 compliance' },
-    { icon: FileSearch, title: 'Software Risk Analysis', desc: 'Automated risk classification for embedded development and AI Act compliant systems' },
-    { icon: Code2, title: 'AI Code Assistant (1000b)', desc: 'Cloud LLM assists developers with code reviews, security fixes and compliance documentation' },
+    { icon: ShieldCheck, title: 'DevSecOps Security Suite', desc: '6 integrated security tools continuously scan firmware and software of your machines for vulnerabilities' },
+    { icon: ScanLine, title: 'Firmware & Code Scanning', desc: 'Semgrep + Gitleaks analyze embedded code, controller software and CI/CD pipelines automatically' },
+    { icon: Bug, title: 'Container & Dependency Scanning', desc: 'Trivy + Grype scan container images and dependencies for CVEs — CRA-compliant documentation' },
+    { icon: Package, title: 'SBOM Generator (CRA/NIS2)', desc: 'CycloneDX/SPDX Software Bill of Materials — mandatory for manufacturers under the Cyber Resilience Act' },
+    { icon: FileSearch, title: 'Software Risk Assessment', desc: 'Automated risk classification for embedded software, firmware and AI Act compliant control systems' },
+    { icon: Code2, title: 'AI Code Assistant (1000B)', desc: 'BSI-certified cloud LLM implements security fixes, writes risk assessments and is available for employee use' },
   ],
 }
 

pitch-deck/components/slides/HowItWorksSlide.tsx

@@ -3,7 +3,7 @@
 import { motion } from 'framer-motion'
 import { Language } from '@/lib/types'
 import { t } from '@/lib/i18n'
-import { Plug, Settings, RefreshCw, CheckCircle2 } from 'lucide-react'
+import { Plug, GitBranch, RefreshCw, CheckCircle2 } from 'lucide-react'
 import GradientText from '../ui/GradientText'
 import FadeInView from '../ui/FadeInView'
 
@@ -11,7 +11,7 @@ interface HowItWorksSlideProps {
   lang: Language
 }
 
-const stepIcons = [Plug, Settings, RefreshCw, CheckCircle2]
+const stepIcons = [Plug, GitBranch, RefreshCw, CheckCircle2]
 const stepColors = ['text-blue-400', 'text-indigo-400', 'text-purple-400', 'text-green-400']
 
 export default function HowItWorksSlide({ lang }: HowItWorksSlideProps) {

pitch-deck/components/slides/MarketSlide.tsx

@@ -3,7 +3,7 @@
 import { useState } from 'react'
 import { motion, AnimatePresence } from 'framer-motion'
 import { Language, PitchMarket } from '@/lib/types'
-import { t } from '@/lib/i18n'
+import { t, formatEur } from '@/lib/i18n'
 import { ExternalLink, X, TrendingUp } from 'lucide-react'
 import GradientText from '../ui/GradientText'
 import FadeInView from '../ui/FadeInView'
@@ -26,29 +26,29 @@ interface MarketSourceInfo {
 const marketSources: Record<string, MarketSourceInfo[]> = {
   TAM: [
     {
-      name: 'Grand View Research — GRC Market Report',
+      name: 'Grand View Research — GRC Market Report + MarketsAndMarkets DevSecOps',
       url: 'https://www.grandviewresearch.com/industry-analysis/governance-risk-management-compliance-market',
       date: '2024',
-      excerpt_de: 'Der globale GRC-Software-Markt wurde 2023 auf rund 11,8 Mrd. USD bewertet und soll bis 2030 mit einer CAGR von 14,3% auf ca. 35 Mrd. USD wachsen. Compliance-Management ist das am schnellsten wachsende Segment.',
-      excerpt_en: 'The global GRC software market was valued at approximately USD 11.8B in 2023 and is projected to grow at a CAGR of 14.3% to reach ~USD 35B by 2030. Compliance management is the fastest-growing segment.',
+      excerpt_de: 'Der globale GRC-Software-Markt wurde 2023 auf rund 11,8 Mrd. USD bewertet. Zusammen mit dem DevSecOps-Markt fuer die Fertigungsindustrie (~3,5 Mrd. USD) ergibt sich ein kombinierter TAM von ca. 8,7 Mrd. EUR fuer Compliance & Code-Security im produzierenden Gewerbe.',
+      excerpt_en: 'The global GRC software market was valued at approximately USD 11.8B in 2023. Combined with the DevSecOps market for manufacturing (~USD 3.5B), the combined TAM for compliance & code security in manufacturing is approximately EUR 8.7B.',
     },
   ],
   SAM: [
     {
-      name: 'Statista / IDC — European Compliance Software',
-      url: 'https://www.statista.com/outlook/tmo/software/enterprise-software/compliance-software/europe',
+      name: 'VDMA / Statista / IDC — DACH Maschinenbau Compliance & Security',
+      url: 'https://www.vdma.org/statistics',
       date: '2024',
-      excerpt_de: 'Der europaeische Compliance-Software-Markt wird auf ca. 4,2 Mrd. EUR geschaetzt, wobei die DACH-Region (Deutschland, Oesterreich, Schweiz) mit rund 2,1 Mrd. EUR etwa die Haelfte ausmacht. Der Markt waechst mit 18% p.a. — getrieben durch DSGVO, NIS2 und den AI Act.',
-      excerpt_en: 'The European compliance software market is estimated at approx. EUR 4.2B, with the DACH region (Germany, Austria, Switzerland) accounting for roughly EUR 2.1B. The market is growing at 18% p.a. — driven by GDPR, NIS2, and the AI Act.',
+      excerpt_de: 'Die DACH-Region hat ca. 5.000 Maschinen- und Anlagenbauer mit eigener Softwareentwicklung. Der Compliance- und Security-Software-Markt fuer diese Branche wird auf ca. 850 Mio. EUR geschaetzt — getrieben durch CRA, NIS2, AI Act und steigende Anforderungen an Produktsoftware.',
+      excerpt_en: 'The DACH region has approx. 5,000 machine and plant manufacturers with in-house software development. The compliance and security software market for this industry is estimated at approx. EUR 850M — driven by CRA, NIS2, AI Act and increasing requirements for product software.',
     },
   ],
   SOM: [
     {
-      name: 'Eigene Analyse auf Basis von Destatis und KfW-Mittelstandspanel',
-      url: 'https://www.destatis.de/DE/Themen/Branchen-Unternehmen/Unternehmen/Kleine-Unternehmen-Mittlere-Unternehmen/_inhalt.html',
+      name: 'VDMA Mitgliederstatistik + eigene Analyse',
+      url: 'https://www.vdma.org/mitglieder',
       date: '2024-2025',
-      excerpt_de: 'In Deutschland gibt es ca. 3,5 Mio. KMU (Destatis). Davon sind geschaetzt 150.000-200.000 in regulierten Branchen (Gesundheit, Finanzen, Energie, KRITIS) mit erhoehtem Compliance-Bedarf. Bei einem durchschnittlichen Jahresumsatz von 900-1.200 EUR pro Kunde ergibt sich ein adressierbarer Markt von ca. 180 Mio. EUR fuer Self-Hosted-Compliance-Loesungen.',
-      excerpt_en: 'Germany has approx. 3.5M SMEs (Destatis). Of these, an estimated 150,000-200,000 operate in regulated industries (healthcare, finance, energy, critical infrastructure) with elevated compliance needs. At an average annual revenue of EUR 900-1,200 per customer, this yields an addressable market of approx. EUR 180M for self-hosted compliance solutions.',
+      excerpt_de: 'Im VDMA sind ca. 3.600 Unternehmen allein in Deutschland registriert, DACH-weit ca. 5.000. Die meisten haben Embedded-Softwareentwicklung im Haus. Bei einer realistischen Marktdurchdringung von 10% (~500 Unternehmen) und einem durchschnittlichen Jahresumsatz von ~14.400 EUR pro Kunde (Blended Avg. aus Mini/Studio/Cloud) ergibt sich ein SOM von ca. 7,2 Mio. EUR.',
+      excerpt_en: 'The VDMA has approx. 3,600 member companies in Germany alone, ~5,000 across DACH. Most have embedded software development in-house. At a realistic market penetration of 10% (~500 companies) and an average annual revenue of ~EUR 14,400 per customer (blended avg. of Mini/Studio/Cloud), the SOM is approx. EUR 7.2M.',
     },
   ],
 }
@@ -197,12 +197,28 @@ export default function MarketSlide({ lang, market }: MarketSlideProps) {
                       <span className="text-xs text-white/30">{labels[idx]}</span>
                     </div>
                     <div className="text-2xl font-bold text-white">
-                      <AnimatedCounter
-                        target={m.value_eur / 1_000_000_000}
-                        suffix={lang === 'de' ? ' Mrd. EUR' : 'B EUR'}
-                        decimals={1}
-                        duration={1500}
-                      />
+                      {m.value_eur >= 1_000_000_000 ? (
+                        <AnimatedCounter
+                          target={m.value_eur / 1_000_000_000}
+                          suffix={lang === 'de' ? ' Mrd. EUR' : 'B EUR'}
+                          decimals={1}
+                          duration={1500}
+                        />
+                      ) : m.value_eur >= 1_000_000 ? (
+                        <AnimatedCounter
+                          target={m.value_eur / 1_000_000}
+                          suffix={lang === 'de' ? ' Mio. EUR' : 'M EUR'}
+                          decimals={1}
+                          duration={1500}
+                        />
+                      ) : (
+                        <AnimatedCounter
+                          target={m.value_eur / 1_000}
+                          suffix={'k EUR'}
+                          decimals={0}
+                          duration={1500}
+                        />
+                      )}
                     </div>
                     <div className="flex items-center gap-3 text-xs">
                       {m.growth_rate_pct > 0 && (

pitch-deck/components/slides/RegulatorySlide.tsx

@@ -6,13 +6,13 @@ import { t } from '@/lib/i18n'
 import GradientText from '../ui/GradientText'
 import FadeInView from '../ui/FadeInView'
 import GlassCard from '../ui/GlassCard'
-import { Shield, Scale, Wifi, Calendar, AlertTriangle, CheckCircle2, Clock } from 'lucide-react'
+import { Shield, Scale, Wifi, Lock, Calendar, AlertTriangle, CheckCircle2, Clock } from 'lucide-react'
 
 interface RegulatorySlideProps {
   lang: Language
 }
 
-type RegTab = 'dsgvo' | 'aiact' | 'nis2'
+type RegTab = 'dsgvo' | 'aiact' | 'cra' | 'nis2'
 
 export default function RegulatorySlide({ lang }: RegulatorySlideProps) {
   const i = t(lang)
@@ -22,6 +22,7 @@ export default function RegulatorySlide({ lang }: RegulatorySlideProps) {
   const tabs: { id: RegTab; label: string; icon: typeof Shield }[] = [
     { id: 'dsgvo', label: de ? 'DSGVO / GDPR' : 'GDPR', icon: Shield },
     { id: 'aiact', label: 'AI Act', icon: Scale },
+    { id: 'cra', label: 'CRA', icon: Lock },
     { id: 'nis2', label: 'NIS2', icon: Wifi },
   ]
 
@@ -122,6 +123,49 @@ export default function RegulatorySlide({ lang }: RegulatorySlideProps) {
             'Regulatory change monitoring',
           ],
     },
+    cra: {
+      fullName: de ? 'Cyber Resilience Act (EU 2024/2847)' : 'Cyber Resilience Act (EU 2024/2847)',
+      status: de ? 'In Kraft seit Dez 2024' : 'In effect since Dec 2024',
+      statusColor: 'text-amber-400',
+      statusIcon: Clock,
+      deadline: de ? 'Sep 2026: Meldepflichten · Dez 2027: Vollstaendig anzuwenden' : 'Sep 2026: Reporting · Dec 2027: Fully applicable',
+      affectedCompanies: de ? 'Alle Hersteller von Produkten mit digitalen Elementen (Hardware & Software)' : 'All manufacturers of products with digital elements (hardware & software)',
+      keyRequirements: de
+        ? [
+            'Security by Design fuer alle Produkte mit Software',
+            'Schwachstellen-Management ueber gesamten Produktlebenszyklus',
+            'Software Bill of Materials (SBOM) fuer jedes Produkt',
+            'Kostenlose Sicherheitsupdates fuer Kunden',
+            'Meldepflicht bei aktiv ausgenutzten Schwachstellen (24h)',
+            'Konformitaetsbewertung durch Drittstelle (fuer kritische Produkte)',
+            'CE-Kennzeichnung fuer Cybersecurity-Compliance',
+          ]
+        : [
+            'Security by design for all products with software',
+            'Vulnerability management across entire product lifecycle',
+            'Software Bill of Materials (SBOM) for every product',
+            'Free security updates for customers',
+            'Reporting of actively exploited vulnerabilities (24h)',
+            'Third-party conformity assessment (for critical products)',
+            'CE marking for cybersecurity compliance',
+          ],
+      fines: de ? 'Bis zu 15 Mio. EUR oder 2,5% des weltweiten Jahresumsatzes' : 'Up to EUR 15M or 2.5% of global annual revenue',
+      howWeHelp: de
+        ? [
+            'Automatische SBOM-Generierung aus Code-Repositories',
+            'Kontinuierliches Schwachstellen-Scanning (Trivy, Grype)',
+            'Security-Fixes durch 1000B Cloud-LLM implementiert',
+            'CRA-konforme Dokumentation und Audit-Trail',
+            'Risikoanalysen fuer Embedded-Software und Firmware',
+          ]
+        : [
+            'Automatic SBOM generation from code repositories',
+            'Continuous vulnerability scanning (Trivy, Grype)',
+            'Security fixes implemented by 1000B cloud LLM',
+            'CRA-compliant documentation and audit trail',
+            'Risk assessments for embedded software and firmware',
+          ],
+    },
     nis2: {
       fullName: de ? 'NIS-2-Richtlinie (EU 2022/2555)' : 'NIS2 Directive (EU 2022/2555)',
       status: de ? 'Umsetzung in nationales Recht laeuft' : 'National transposition in progress',

pitch-deck/components/slides/SolutionSlide.tsx

@@ -3,7 +3,7 @@
 import { motion } from 'framer-motion'
 import { Language } from '@/lib/types'
 import { t } from '@/lib/i18n'
-import { Server, ShieldCheck, Bot } from 'lucide-react'
+import { Server, ScanLine, Bot } from 'lucide-react'
 import GlassCard from '../ui/GlassCard'
 import GradientText from '../ui/GradientText'
 import FadeInView from '../ui/FadeInView'
@@ -13,7 +13,7 @@ interface SolutionSlideProps {
   lang: Language
 }
 
-const icons = [Server, ShieldCheck, Bot]
+const icons = [Server, ScanLine, Bot]
 const colors = ['from-blue-500 to-cyan-500', 'from-indigo-500 to-purple-500', 'from-purple-500 to-pink-500']
 
 export default function SolutionSlide({ lang }: SolutionSlideProps) {
@@ -26,7 +26,7 @@ export default function SolutionSlide({ lang }: SolutionSlideProps) {
           <GradientText>{i.solution.title}</GradientText>
         </h2>
         <p className="text-lg text-white/50 max-w-2xl mx-auto">
-          <BrandName /> — {lang === 'de' ? 'Compliance auf Autopilot' : 'Compliance on Autopilot'}
+          {i.solution.subtitle}
         </p>
       </FadeInView>