B3S DONE FOR YOU

Automated KHGZ security compliance
for healthcare IT

100% eligible for FTB 10. Up to zero net cost.
Secure hospital funding and clinical integrity with B3S standards—automated in minutes. 

EMPOWERED BY A STRONG ECOSYSTEM

Limited IT personnel? Not an issue.

One administrator can manage thousands of systems with just a few clicks. Cloud, hybrid and legacy – all centralized in a single control plane.

Security compliance that maintains itself

Your IT infrastructure compliant. Your B3S audit reports ready at all times. XOAP eliminates the risk of 2% DRG revenue sanctions and the burden of manual work.

Complete infrastructure visibility

From modern cloud environments to legacy PACS and diagnostic workstations, every system is centralized within a single control plane.

Automated security baselines

XOAP applies B3S and BSI-compliant configurations across your environment automatically. No manual hardening of individual servers or clients required. No coding.

Continuous drift detection

XOAP monitors systems 24/7, enabling rapid responses to security gaps. Unchangeable system settings strengthen the overall security posture.

Instant audit-ready reports

Generate on-demand compliance reports for BSI and KHZG auditors instantly, backed by real-time data logs.

XOAP onboarding

Full KRITIS and KHSFG eligibility

XOAP meets security requirements for KRITIS hospitals and is 100% eligible for KHZG refinancing under Fördertatbestand 10. This can mean zero own contribution from your hospital, depending on the region.

Secure your entire hospital IT
infrastructure today

Reach full security compliance in days, not months—and meet regulatory deadlines with peace of mind.

Customer Success stories

Delivering value to companies worldwide

KFW DEG Invest

Simplified system management and configuration

DEG has accelerated global deployment of Windows Client systems with Microsoft Intune in an Azure AD hybrid environment.

DEG campus Cologne
Landeszentrum für Datenverarbeitung LZfD

Reduced overall costs and administrative activities

With little effort, the State Center for Data Processing – LZfD implements a forward-looking strategy for the flexible migration to the latest version of the Windows operating system, achieving optimized IT service management.

LZfD campus in Karlsruhe
Nanu-Nana since 1972

Server automation, standardization and hardening​

Deliver and standardize the complete Windows Remote Desktop Service infrastructure. Upgrade, migrate and reduce complexity with XOAP.

Need to act fast? We'll walk you through it

Scroll to Top