feat: Komplette Story-Ueberarbeitung — KMU-Maschinenbau-Narrative
Problem: Regulierungs-Tsunami (5+ Gesetze, persoenliche GF-Haftung), jaehrliche Stichproben (50k+ EUR/Jahr), Datensouveraenitaet (0 DE-Alternativen) Loesung: Kontinuierliche Code-Security statt Stichproben, Compliance auf Autopilot (VVT, TOMs, DSFA, Loeschfristen, CE), Deutsche Cloud (BSI DE / OVH FR), Jitsi, Matrix, Jira-Integration ROI: Kunde zahlt 50k/Jahr, spart 50k+ (Pentests, CE, Auditmanager) DB: Funding 1M EUR, SOM 24M EUR Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Benjamin Admin
@@ -36,12 +36,14 @@ const translations = {
|
||||
title: 'Executive Summary',
|
||||
subtitle: 'BreakPilot ComplAI — Ihr Investment auf einen Blick',
|
||||
problem: 'Das Problem',
|
||||
problemText: 'Maschinenbauer entwickeln zunehmend Software — aber DSGVO, AI Act, CRA und NIS2 überfordern interne Teams. Bußgelder von über 4,1 Mrd. EUR und 30.000+ betroffene Unternehmen zeigen den Handlungsdruck.',
|
||||
solution: 'Unsere Lösung',
|
||||
solutionText: 'Full Compliance GPT mit Text und Ton. ISMS, CE-Software-Compliance, kontinuierlicher Pentest, SBOM, DAST, SAST — alles voll automatisiert. VVT, TOMs, Loeschfristen, DSFA und alle Pflichten aus einer Hand. Volle Jira-Integration mit automatischer Ticketerstellung bei Findings inkl. Implementierungsvorschlaegen.',
|
||||
problemText: 'KMU im Maschinenbau (10-500 MA) werden von EU-Regularien ueberrollt: AI Act, NIS2, CRA, DSGVO, Maschinenverordnung. Pentests und CE-Zertifizierungen kosten 50.000+ EUR/Jahr — pruefen aber nur einmal. Nichts laeuft kontinuierlich, nichts prueft den Code. Inhaber und GF haften persoenlich.',
|
||||
solution: 'Unsere Loesung',
|
||||
solutionText: 'Kontinuierliche Code-Security statt jaehrlicher Stichproben: SAST, DAST, SBOM, Pentesting bei jeder Aenderung. VVT, TOMs, DSFA, Loeschfristen und CE-Risikobeurteilung automatisch. Findings als Jira-Tickets mit Implementierungsvorschlaegen. Academy fuer GF und Mitarbeiter. BSI-Cloud in DE oder OVH in FR.',
|
||||
roi: 'Kundenersparnis',
|
||||
roiText: 'Kunden zahlen ca. 50.000 EUR/Jahr und sparen: 30.000 EUR Pentests, 20.000 EUR CE-Beurteilungen, Auditmanager-Kosten und Strafrisiko. ROI ab Tag 1.',
|
||||
market: 'Markt',
|
||||
businessModel: 'Geschaeftsmodell',
|
||||
businessModelText: 'Recurring Revenue. SaaS-Lizenz + optionale Hardware. Schnelle Amortisation durch Einsparung externer Berater und Audit-Kosten.',
|
||||
businessModelText: 'Kunden zahlen ~50.000 EUR/Jahr und sparen 50.000+ EUR (Pentests, CE-Beurteilungen, Auditmanager). ROI ab Tag 1. BSI-Cloud DE oder OVH FR.',
|
||||
keyMetrics: 'Kennzahlen',
|
||||
documents: 'Originaldokumente',
|
||||
controls: 'Extrahierte Controls',
|
||||
@@ -53,7 +55,7 @@ const translations = {
|
||||
contact: 'Kontakt',
|
||||
downloadPdf: 'Als PDF herunterladen',
|
||||
usp: 'USP',
|
||||
uspText: 'Full KI Compliance Check + CE-Software-Risikobeurteilung + DevSecOps aus einer Hand. Kein Anbieter kombiniert das fuer den Maschinenbau.',
|
||||
uspText: 'Einzige Plattform mit kontinuierlicher Code-Security, automatischer Compliance-Dokumentation und CE-Risikobeurteilung fuer den Maschinenbau — auf deutscher Cloud.',
|
||||
},
|
||||
cover: {
|
||||
tagline: 'Compliance & Code-Security für den Maschinenbau',
|
||||
@@ -62,45 +64,45 @@ const translations = {
|
||||
},
|
||||
problem: {
|
||||
title: 'Das Problem',
|
||||
subtitle: 'Maschinenbauer entwickeln Software — aber wer sichert Compliance und Code-Sicherheit?',
|
||||
subtitle: 'KMU im Maschinenbau werden von EU-Regularien ueberrollt — und haften persoenlich',
|
||||
cards: [
|
||||
{
|
||||
title: 'DSGVO',
|
||||
stat: '4.1 Mrd EUR',
|
||||
desc: 'Bußgelder seit 2018. Maschinenbauer verarbeiten Kundendaten, Telemetrie und Wartungsprotokolle — oft ohne DSGVO-Prozesse.',
|
||||
title: 'Regulierungs-Tsunami',
|
||||
stat: '5+ Gesetze',
|
||||
desc: 'AI Act, NIS2, CRA, DSGVO, Maschinenverordnung — KMU mit 10-500 Mitarbeitern haben weder Budget noch Personal fuer Compliance. Inhaber und GF haften persoenlich bei Verstoessen.',
|
||||
},
|
||||
{
|
||||
title: 'AI Act',
|
||||
stat: 'Aug 2025',
|
||||
desc: 'Maschinen mit KI-Komponenten müssen klassifiziert werden. Embedded KI in Steuerungen und Predictive Maintenance erfordert Dokumentation.',
|
||||
title: 'Jaehrliche Stichproben',
|
||||
stat: '50.000+ EUR/Jahr',
|
||||
desc: 'Pentests und CE-Zertifizierungen kosten 50.000+ EUR/Jahr — pruefen aber nur einmal. Nichts laeuft kontinuierlich, nichts prueft die tatsaechliche Umsetzung im Code.',
|
||||
},
|
||||
{
|
||||
title: 'CRA & NIS2',
|
||||
stat: '30.000+',
|
||||
desc: 'Der Cyber Resilience Act verpflichtet Hersteller, Software in ihren Produkten abzusichern. NIS2 erweitert die Cybersecurity-Pflichten auf den Maschinenbau.',
|
||||
title: 'Datensouveraenitaet',
|
||||
stat: '0 Alternativen',
|
||||
desc: 'Deutsche Maschinenbauer wollen keine US-SaaS in ihrem Source Code. Aber sie haben keine Zeit, eigene Loesungen zu integrieren. Es gibt keine deutsche Alternative.',
|
||||
},
|
||||
],
|
||||
quote: 'Maschinenbauer brauchen keine Compliance-Berater — sie brauchen eine KI, die ihren Code scannt, Risiken bewertet und Compliance dokumentiert.',
|
||||
quote: 'Maschinenbauer brauchen keine Compliance-Berater — sie brauchen eine KI, die ihren Code kontinuierlich scannt, Risiken bewertet und alle Nachweise automatisch erstellt.',
|
||||
},
|
||||
solution: {
|
||||
title: 'Die Lösung',
|
||||
subtitle: 'ComplAI — Compliance & Code-Security auf Autopilot',
|
||||
title: 'Die Loesung',
|
||||
subtitle: 'Kontinuierliche Software-Compliance statt jaehrlicher Stichproben',
|
||||
pillars: [
|
||||
{
|
||||
title: 'Self-Hosted Vorarbeit',
|
||||
desc: 'Mac Mini oder Mac Studio im Serverraum scannt Code, analysiert Repositories und erstellt Compliance-Dokumente. Kein Byte verlässt das Unternehmen.',
|
||||
icon: 'server',
|
||||
},
|
||||
{
|
||||
title: 'Code-Security & DevSecOps',
|
||||
desc: 'Scannt Firmware und Software mit integrierten DevSecOps-Tools (Trivy, Semgrep, Gitleaks). Das 1000B Cloud-LLM implementiert Fixes und schreibt Risikoanalysen.',
|
||||
title: 'Kontinuierliche Code-Security',
|
||||
desc: 'SAST, DAST, SBOM und Pentesting bei jeder Code-Aenderung — nicht einmal im Jahr. Findings direkt als Jira-Tickets mit Implementierungsvorschlaegen. 30.000+ EUR/Jahr Pentest-Kosten gespart.',
|
||||
icon: 'scan',
|
||||
},
|
||||
{
|
||||
title: 'Compliance-KI',
|
||||
desc: 'Macht Ihr Unternehmen UND Ihre Produkte compliant. 170+ indexierte Originaldokumente, 40.000+ extrahierte Controls, 84 Regularien fuer 10 Branchen.',
|
||||
title: 'Compliance auf Autopilot',
|
||||
desc: 'VVT, TOMs, DSFA, Loeschfristen, CE-Software-Risikobeurteilung — alles automatisch generiert. Academy mit Schulungen fuer GF und Mitarbeiter. Audit-ready auf Knopfdruck.',
|
||||
icon: 'bot',
|
||||
},
|
||||
{
|
||||
title: 'Deutsche Cloud, volle Integration',
|
||||
desc: 'BSI-zertifizierte Cloud in DE oder OVH in FR. Jitsi (Video), Matrix (Chat), KI-Aufgabenerstellung aus Audio. Keine US-SaaS im Source Code. Optional Mac Mini fuer maximale Privacy.',
|
||||
icon: 'server',
|
||||
},
|
||||
],
|
||||
},
|
||||
regulatoryLandscape: {
|
||||
@@ -312,12 +314,14 @@ const translations = {
|
||||
title: 'Executive Summary',
|
||||
subtitle: 'BreakPilot ComplAI — Your Investment at a Glance',
|
||||
problem: 'The Problem',
|
||||
problemText: 'Machine manufacturers increasingly develop software — but GDPR, AI Act, CRA and NIS2 overwhelm internal teams. Over EUR 4.1B in fines and 30,000+ affected companies show the urgency.',
|
||||
problemText: 'SME machine manufacturers (10-500 employees) are overwhelmed by EU regulations: AI Act, NIS2, CRA, GDPR, Machinery Regulation. Pentests and CE certifications cost EUR 50,000+/year — but only check once. Nothing runs continuously, nothing checks the code. Owners and CEOs are personally liable.',
|
||||
solution: 'Our Solution',
|
||||
solutionText: 'Full Compliance GPT with text and audio. ISMS, CE software compliance, continuous pentesting, SBOM, DAST, SAST — fully automated. RoPA, TOMs, retention policies, DPIA and all obligations from a single platform. Full Jira integration with automatic ticket creation for findings incl. implementation suggestions.',
|
||||
solutionText: 'Continuous code security instead of annual spot checks: SAST, DAST, SBOM, pentesting on every change. RoPA, TOMs, DPIA, retention policies and CE risk assessment generated automatically. Findings as Jira tickets with implementation suggestions. Academy for management and employees. BSI cloud in DE or OVH in FR.',
|
||||
roi: 'Customer Savings',
|
||||
roiText: 'Customers pay ~EUR 50,000/year and save: EUR 30,000 pentests, EUR 20,000 CE assessments, audit manager costs and penalty risk. ROI from day 1.',
|
||||
market: 'Market',
|
||||
businessModel: 'Business Model',
|
||||
businessModelText: 'Recurring revenue. SaaS license + optional hardware. Fast ROI by replacing external consultants and audit costs.',
|
||||
businessModelText: 'Customers pay ~EUR 50,000/year and save EUR 50,000+ (pentests, CE assessments, audit managers). ROI from day 1. BSI cloud DE or OVH FR.',
|
||||
keyMetrics: 'Key Metrics',
|
||||
documents: 'Original Documents',
|
||||
controls: 'Extracted Controls',
|
||||
@@ -329,7 +333,7 @@ const translations = {
|
||||
contact: 'Contact',
|
||||
downloadPdf: 'Download as PDF',
|
||||
usp: 'USP',
|
||||
uspText: 'Full AI compliance check + CE software risk assessment + DevSecOps from a single provider. No competitor combines this for manufacturing.',
|
||||
uspText: 'Only platform with continuous code security, automatic compliance documentation and CE risk assessment for manufacturing — on German cloud.',
|
||||
},
|
||||
cover: {
|
||||
tagline: 'Compliance & Code Security for Machine Manufacturers',
|
||||
@@ -338,45 +342,45 @@ const translations = {
|
||||
},
|
||||
problem: {
|
||||
title: 'The Problem',
|
||||
subtitle: 'Machine manufacturers develop software — but who ensures compliance and code security?',
|
||||
subtitle: 'SME machine manufacturers are overwhelmed by EU regulations — and personally liable',
|
||||
cards: [
|
||||
{
|
||||
title: 'GDPR',
|
||||
stat: 'EUR 4.1B',
|
||||
desc: 'in fines since 2018. Machine manufacturers process customer data, telemetry and maintenance logs — often without GDPR processes.',
|
||||
title: 'Regulation Tsunami',
|
||||
stat: '5+ Laws',
|
||||
desc: 'AI Act, NIS2, CRA, GDPR, Machinery Regulation — SMEs with 10-500 employees lack both budget and staff for compliance. Owners and CEOs are personally liable for violations.',
|
||||
},
|
||||
{
|
||||
title: 'AI Act',
|
||||
stat: 'Aug 2025',
|
||||
desc: 'Machines with AI components must be classified. Embedded AI in controllers and predictive maintenance requires documentation.',
|
||||
title: 'Annual Spot Checks',
|
||||
stat: 'EUR 50,000+/yr',
|
||||
desc: 'Pentests and CE certifications cost EUR 50,000+/year — but only check once. Nothing runs continuously, nothing verifies actual implementation in code.',
|
||||
},
|
||||
{
|
||||
title: 'CRA & NIS2',
|
||||
stat: '30,000+',
|
||||
desc: 'The Cyber Resilience Act obligates manufacturers to secure software in their products. NIS2 extends cybersecurity obligations to machine manufacturing.',
|
||||
title: 'Data Sovereignty',
|
||||
stat: '0 Alternatives',
|
||||
desc: 'German manufacturers refuse US SaaS in their source code. But they lack the time to integrate their own solutions. There is no German alternative.',
|
||||
},
|
||||
],
|
||||
quote: 'Machine manufacturers don\'t need compliance consultants — they need an AI that scans their code, assesses risks and documents compliance.',
|
||||
quote: 'Machine manufacturers don\'t need compliance consultants — they need an AI that continuously scans their code, assesses risks and automatically creates all evidence.',
|
||||
},
|
||||
solution: {
|
||||
title: 'The Solution',
|
||||
subtitle: 'ComplAI — Compliance & Code Security on Autopilot',
|
||||
subtitle: 'Continuous software compliance instead of annual spot checks',
|
||||
pillars: [
|
||||
{
|
||||
title: 'Self-Hosted Preprocessing',
|
||||
desc: 'Mac Mini or Mac Studio in your server room scans code, analyzes repositories and creates compliance documents. No data leaves the company.',
|
||||
icon: 'server',
|
||||
},
|
||||
{
|
||||
title: 'Code Security & DevSecOps',
|
||||
desc: 'Scans firmware and software with integrated DevSecOps tools (Trivy, Semgrep, Gitleaks). The 1000B cloud LLM implements fixes and writes risk assessments.',
|
||||
title: 'Continuous Code Security',
|
||||
desc: 'SAST, DAST, SBOM and pentesting on every code change — not once a year. Findings as Jira tickets with implementation suggestions. EUR 30,000+/year pentest costs saved.',
|
||||
icon: 'scan',
|
||||
},
|
||||
{
|
||||
title: 'Compliance AI',
|
||||
desc: 'Makes your company AND your products compliant. 170+ indexed original documents, 40,000+ extracted controls, 84 regulations across 10 industries.',
|
||||
title: 'Compliance on Autopilot',
|
||||
desc: 'RoPA, TOMs, DPIA, retention policies, CE software risk assessment — all generated automatically. Academy with training for management and employees. Audit-ready at the push of a button.',
|
||||
icon: 'bot',
|
||||
},
|
||||
{
|
||||
title: 'German Cloud, Full Integration',
|
||||
desc: 'BSI-certified cloud in DE or OVH in FR. Jitsi (video), Matrix (chat), AI task creation from audio. No US SaaS in source code. Optional Mac Mini for maximum privacy.',
|
||||
icon: 'server',
|
||||
},
|
||||
],
|
||||
},
|
||||
regulatoryLandscape: {
|
||||
|
||||
Reference in New Issue
Block a user