Why this environment matters
The platform for hydrogen electrolyser controllers manages electrical input, water feed, gas purity, compression and protective shutdowns in hydrogen production. The operational risk is specific: unsafe commands or corrupted purity measurements can create equipment damage, flammable mixtures or off-specification product. NØNOS could provide a smaller, memory-safe base for dividing that workflow into signed, least-privilege components and restoring it from a known state after each sensitive session or incident.
The security challenge
The threat model should assume that one component will eventually fail or be exploited. In this case, unsafe commands or corrupted purity measurements can create equipment damage, flammable mixtures or off-specification product. Energy and resource systems combine high-energy equipment, geographically distributed assets and operational technology that cannot be patched or restarted like an ordinary office computer. The aim is to prevent that single failure from automatically gaining the keys, devices, records and network paths of the whole platform.
How the capsule model could help
A candidate NØNOS architecture would separate power control, gas analysis, safety monitoring and remote service components with constrained actuator access. The design would prioritise zone-specific capabilities and isolated remote maintenance, supported by minimal persistent administration state and a verified boot chain. Each capsule would carry a declared policy for files, networks, devices and secrets, and unknown or altered software would not receive the same authority as an approved component.
Deployment requirements
Deployment would require site-specific engineering, segregation from independent protection systems, deterministic performance testing, change control and compliance review. NØNOS would not replace certified relays or safety systems by default.
Current public-beta limitations, hardware support and application availability must be assessed before any pilot. Neither this use case nor an industry source establishes NONOS certification or a current customer deployment.
Who could buy or integrate it?
- Electrolyser OEMs choosing controller and service software
- Hydrogen project developers purchasing integrated production plants
- Industrial automation integrators coordinating electrolyser balance-of-plant controls
Industry examples: Nel Hydrogen, ITM Power. These are research prospects, not represented as NONOS customers, partners or endorsers.