WZ-IT Logo
Case Study

AB-View: a production remote access platform for ABCO Water Systems (Australia)

Central, role-based and auditable browser access to distributed water treatment plants - built and operated by WZ-IT, delivered from a DACH base to Australia

ABCO Water Systems treatment site
About the Client

ABCO Water Systems (Australia)

ABCO Water Systems

ABCO Water Systems

ABCO Water Systems is an Australian water and wastewater treatment specialist headquartered at 17 Brant Rd, Kelmscott, Western Australia (WA 6111). The company delivers systems for distributed, often hard-to-reach sites.

ABCO Water Systems needed a platform that lets authorized users securely access HMIs, web interfaces and related plant networks without local VPN clients, manual tool setup or directly exposed plant targets.

At a Glance

The project in brief

Customer

ABCO Water Systems

Country

Australia (Western Australia)

Industry

Water and wastewater treatment (critical infrastructure)

Challenge

Make distributed plants securely and centrally accessible - without local VPN clients or exposed plant targets

Solution

AB-View: a central portal with Apache Guacamole, WireGuard, RBAC, session tokens and audit logs

Result

Live platform in production with central, controlled and scalable plant access

Market & Trends

Australia's water sector under digitalisation, security and workforce pressure

Australia's water sector faces regulatory pressure to digitalise, tightening critical-infrastructure obligations and an acute skills shortage at remote sites at the same time. Secure, centralised remote access to distributed assets is shifting from optional to mandatory - exactly the pattern AB-View already runs in production for ABCO Water Systems.

Regulatory push to digitalise

A draft National Water Agreement unveiled in June 2025 shifts Australian water utilities from infrastructure build-out toward measurable performance and accountability - making technology a condition of continued funding and regulatory approval.

Critical-infrastructure duties (SOCI Act)

The Security of Critical Infrastructure Act 2018 lists 'water and sewerage' among 11 critical sectors. Responsible entities must run a risk management programme (CIRMP); approved frameworks are ISO 27001, NIST CSF and the ASD Essential Eight. Significant incidents must be reported within 12 hours, and CIRMP failures can cost up to AUD 660,000 per day.

Secure remote access is leaving the VPN

The 2025 OT/ICS market is phasing out VPN and jump-server architectures in favour of clientless, HTML5/browser-based Zero-Trust access - with role-based access control (RBAC), time-bound least-privilege sessions and session recording as audit-ready evidence.

Skills shortage drives remote maintenance

The median age in the Australian water sector is 47; a 2025 report on NSW local water utilities found 59% of the workforce over 50. In very-remote regions, more than 80% of employers cite location for low applicant numbers - a strong case for central remote access over costly on-site visits.

Challenge

Making distributed plants centrally accessible

ABCO Water Systems needed a platform that lets authorized users securely access HMIs, web interfaces and related plant networks without local VPN clients, manual tool setup or directly exposed plant targets.

Distributed water treatment plants at hard-to-reach sites
VNC HMIs, Web HMIs and plant networks needed central management
Customers and operators needed role-based, auditable access
Existing plants and legacy networks had to be connected without a big-bang migration

Typical anti-patterns we had to avoid

  • Per-device remote tools (e.g. TeamViewer) without central roles and audit trails
  • HMIs and controllers exposed directly to the internet as an open attack surface
  • VPN clients and tool setups handed out manually per technician, which do not scale
  • Proprietary remote-access appliances with per-device licences and vendor lock-in
Our Solution

A production remote access platform instead of individual VPN access

WZ-IT developed AB-View as a web portal for plants, devices, users, permissions, sessions and auditing. Site connectivity runs through WireGuard tunnels; users access VNC and Web HMIs directly from the browser.

Central plant portal

Plant and device management for plants, HMIs, Web HMIs and documents in one shared interface

Browser-based HMI access

VNC HMIs via Apache Guacamole and Web HMIs via a controlled reverse proxy - without client setup for end users

Roles, sessions and audit logs

Permission checks before every access, short-lived session tokens and traceability for security-relevant actions

Production operations with site connectivity

WireGuard-based plant connectivity, health checks, server monitoring and support for new as well as existing customer networks

Solution & Architecture

How AB-View models secure access

AB-View consistently separates users, access logic and plant networks. The portal checks permissions before every access; plant targets are never reachable directly from the internet, only through the gateway and WireGuard tunnels. Access happens clientless in the browser - no software needs to be installed for end users.

Users & Customers

Access straight from the browser, no client install, multi-tenant

AB-View Portal

RBAC, short-lived session tokens, permission checks and audit logs

Access Gateway

Apache Guacamole for VNC HMIs, controlled reverse proxy for Web HMIs

Plant Networks

WireGuard tunnels to distributed water treatment plants, including legacy networks

Permission check before every access. Plant targets stay behind the gateway and WireGuard - never exposed directly to the internet.

Tech Stack

Components in use

Vendor-neutral, auditable open-source components instead of a proprietary appliance - EU/sovereignty-friendly and free of vendor lock-in.

Apache Guacamole (clientless browser gateway)WireGuard (site tunnels)Reverse proxy / Nginx (Web HMIs)PostgreSQL (data & permissions)Docker (operations & deployment)RBAC, session tokens & audit logs
Results

From remote access complexity to a used product

Live Platform

AB-View is used in production

Central Access

HMIs and Web HMIs through one portal

Controlled Access

Roles, sessions and auditing

Scalable

New plants can be connected in a standardized way

Why custom & sovereign

WZ-IT as the specialist for remote management and provisioning

WZ-IT is a builder-operator, not a reseller: we own the full stack of central portal, RBAC, audit logging, WireGuard mesh and Apache Guacamole browser access - and already run it in production with AB-View. This is demonstrated capability, not a slide.

Builder-operator, not reseller

We build and operate the full remote-management/provisioning stack ourselves - in production, not as a concept.

Sovereign, EU-hosted, open source

Vendor-neutral, auditable components without appliance lock-in that map cleanly onto ISO 27001, NIST CSF and Essential Eight as well as NIS2-grade controls.

Ahead of the 2025 OT trend

While the market is only now phasing out VPNs and jump servers, we already ship clientless browser access with least-privilege, session tokens and audit logs today.

Multi-tenant, not per-device licences

Unlike TeamViewer, IXON or per-device licences, each customer gets scoped, role-based and auditable access to only their HMIs - with no exposed plant targets.

From a DACH base, delivered to Australia

The same remote-management pattern is proven across Australian critical water infrastructure (ABCO/AB-View) and DACH IoT machine fleets (nextGYM) - across sectors and countries, built and operated from a DACH base.

Planning remote access for plants or machines?

We build and operate platforms for distributed industrial sites, remote locations and infrastructure-adjacent applications.

Free intro call

Let's talk about your project - honest and no strings attached

  • Straight with Timo and Robin - no sales team, no pitch
  • An honest take, including when we are not the right fit
  • Concrete next steps for infrastructure, software or AI

No risk: worst case, you leave with a clearer understanding of your project than before.

Timo and Robin, founders of WZ-IT
Jakob Öschlberger
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH

Industry-leading companies worldwide rely on us

  • Rekorder
  • Keymate
  • Führerscheinmacher
  • SolidProof
  • ARGE
  • Boese VA
  • nextGYM
  • Maho Management
  • Golem.de
  • Millenium
  • Paritel
  • Yonju
  • EVADXB
  • Mr. Clipart
  • Aphy
  • Negosh
  • Odiseo Solutions
  • AInergy

What do our customers say?

Andrea Pawlowski
Architecture ConsultingSovereign Software SelectionOpen Source Strategy
I got to know Timo and Robin as dedicated and professional partners who make a lot of things possible for their clients that initially seem impossible. I felt very well advised. The services offered have thoroughly convinced me. (translated)

Andrea Pawlowski

Communications Manager, Golem.de

Golem.de - leading German IT news outlet.

Golem.de
Plan a sovereign open-source stack
Sonja Aßer
Software DevelopmentPHP ModernizationAPI Extension
With Timo and Robin, you're not only on the safe side technically - you also get the best human support! Whether it's quick help in everyday life or complex IT solutions: the guys from WZ-IT think along with you, act quickly and speak a language you understand. The collaboration is uncomplicated, reliable and always on an equal footing. That makes IT fun - and above all: it works! Big thank you to the team! (translated)

Sonja Aßer

Data Manager, ARGE

ARGE Neue Medien - master data & digital standards for plumbing and building technology.

ARGE
Modernize your legacy software
Aleksandr Shuliko
Cloud MigrationAWS ExitProxmox81% Cost Reduction
I recently worked with Timo and the WZ-IT team, and honestly, it turned out to be one of the best tech decisions I have made for my business. Right from the start, Timo took the time to walk me through every step in a simple and calm way. No matter how many questions I had, he never rushed me. The results speak for themselves. With WZ-IT, we reduced our monthly expenses from $1,300 down to $250. This was a huge win for us.

Aleksandr Shuliko

CTO, EVA Real Estate, UAE

EVA Real Estate - leading real-estate agency in Dubai.

EVA Real Estate
Cut cloud cost - up to −81%
Pascal Hakkers
Managed ProxmoxClusterMonitoringHigh Availability
WZ-IT manages our Proxmox cluster reliably and professionally. The team handles continuous monitoring and regular updates for us and responds very quickly to any issues or inquiries. They also configure new nodes, systems, and applications that we need to add to our cluster. With WZ-IT's proactive support, our cluster and the business-critical applications running on it remain stable, and high availability is consistently ensured. We value the professional collaboration and the noticeable relief it brings to our daily operations.

Pascal Hakkers

Managing Director, Aphy B.V., Netherlands

Aphy - AI platform for hotel back-office.

Aphy
Build a high-availability Proxmox cluster
John Hellmerichs
Proxmox & VirtualizationBackupVPNSecurity
WZ-IT provided very competent support in implementing our server and virtualization infrastructure. As part of the project, a Proxmox-based virtualization environment was set up along with a virtual machine for our application systems. Additionally, a structured backup concept was implemented. A particular focus was on security: the setup of a VPN tunnel and the clean implementation of encryption and access concepts were professionally executed. The structured consulting as well as the reliable and swift implementation deserve special mention. We are very satisfied with the services provided and are happy to recommend WZ-IT.

John Hellmerichs

Managing Director, AInergy GmbH

AInergy - consultancy for energy and facility management.

AInergy GmbH
Virtualize with Managed Proxmox
Matthias Zimmermann
Open Source ArchitectureImplementationTechnical Consulting
We have had very good experiences with Mr. Wevelsiep and WZ-IT. The consultation was professional, clearly understandable, and at fair prices. The team not only implemented our requirements but also thought along and proactively. Instead of just processing individual tasks, they provided us with well-founded explanations that strengthened our own understanding. WZ-IT took a lot of pressure off us with their structured approach - that was exactly what we needed and is the reason why we keep coming back. (translated)

Matthias Zimmermann

Managing Director, Annota GmbH

Annota - healthtech startup with an AI documentation assistant.

Annota
Design an open-source AI architecture
Sebastian Maier
Sovereign CollaborationOpen Source StackOperationsMaintenance
Timo and Robin from WZ-IT set up a RocketChat server for us - and I couldn't be more satisfied! From the initial consultation to the final implementation, everything was absolutely professional, efficient, and to my complete satisfaction. I particularly appreciate the clear communication, transparent pricing, and the comprehensive expertise that both bring to the table. Even after the setup, they take care of the maintenance, which frees up my time enormously and allows me to focus on other important areas of my business - with the good feeling that our IT is in the best hands. I can recommend WZ-IT without reservation and look forward to continuing our collaboration! (translated)

Sebastian Maier

Managing Director, Yonju GmbH

Yonju - business coaching and AI products.

Yonju
Get collaboration fully managed
Gabriel Sanz Señor
Production DeploymentCI/CDPaaSOperations
Counting on WZ-IT team was crucial, their expertise and solutions gave us the pace to deploy in production our services, even suggesting and performing improvements over our configuration and setup. We expect to keep counting on them for continuous maintenance of our services and implementation of new solutions.

Gabriel Sanz Señor

Managing Director, Odiseo Solutions

Odiseo Solutions - software engineering for the space industry.

Odiseo Solutions
Ship your prototype to production
Andrea Pawlowski
Architecture ConsultingSovereign Software SelectionOpen Source Strategy
I got to know Timo and Robin as dedicated and professional partners who make a lot of things possible for their clients that initially seem impossible. I felt very well advised. The services offered have thoroughly convinced me. (translated)

Andrea Pawlowski

Communications Manager, Golem.de

Golem.de - leading German IT news outlet.

Golem.de
Plan a sovereign open-source stack
Sonja Aßer
Software DevelopmentPHP ModernizationAPI Extension
With Timo and Robin, you're not only on the safe side technically - you also get the best human support! Whether it's quick help in everyday life or complex IT solutions: the guys from WZ-IT think along with you, act quickly and speak a language you understand. The collaboration is uncomplicated, reliable and always on an equal footing. That makes IT fun - and above all: it works! Big thank you to the team! (translated)

Sonja Aßer

Data Manager, ARGE

ARGE Neue Medien - master data & digital standards for plumbing and building technology.

ARGE
Modernize your legacy software
Aleksandr Shuliko
Cloud MigrationAWS ExitProxmox81% Cost Reduction
I recently worked with Timo and the WZ-IT team, and honestly, it turned out to be one of the best tech decisions I have made for my business. Right from the start, Timo took the time to walk me through every step in a simple and calm way. No matter how many questions I had, he never rushed me. The results speak for themselves. With WZ-IT, we reduced our monthly expenses from $1,300 down to $250. This was a huge win for us.

Aleksandr Shuliko

CTO, EVA Real Estate, UAE

EVA Real Estate - leading real-estate agency in Dubai.

EVA Real Estate
Cut cloud cost - up to −81%
Pascal Hakkers
Managed ProxmoxClusterMonitoringHigh Availability
WZ-IT manages our Proxmox cluster reliably and professionally. The team handles continuous monitoring and regular updates for us and responds very quickly to any issues or inquiries. They also configure new nodes, systems, and applications that we need to add to our cluster. With WZ-IT's proactive support, our cluster and the business-critical applications running on it remain stable, and high availability is consistently ensured. We value the professional collaboration and the noticeable relief it brings to our daily operations.

Pascal Hakkers

Managing Director, Aphy B.V., Netherlands

Aphy - AI platform for hotel back-office.

Aphy
Build a high-availability Proxmox cluster
John Hellmerichs
Proxmox & VirtualizationBackupVPNSecurity
WZ-IT provided very competent support in implementing our server and virtualization infrastructure. As part of the project, a Proxmox-based virtualization environment was set up along with a virtual machine for our application systems. Additionally, a structured backup concept was implemented. A particular focus was on security: the setup of a VPN tunnel and the clean implementation of encryption and access concepts were professionally executed. The structured consulting as well as the reliable and swift implementation deserve special mention. We are very satisfied with the services provided and are happy to recommend WZ-IT.

John Hellmerichs

Managing Director, AInergy GmbH

AInergy - consultancy for energy and facility management.

AInergy GmbH
Virtualize with Managed Proxmox
Matthias Zimmermann
Open Source ArchitectureImplementationTechnical Consulting
We have had very good experiences with Mr. Wevelsiep and WZ-IT. The consultation was professional, clearly understandable, and at fair prices. The team not only implemented our requirements but also thought along and proactively. Instead of just processing individual tasks, they provided us with well-founded explanations that strengthened our own understanding. WZ-IT took a lot of pressure off us with their structured approach - that was exactly what we needed and is the reason why we keep coming back. (translated)

Matthias Zimmermann

Managing Director, Annota GmbH

Annota - healthtech startup with an AI documentation assistant.

Annota
Design an open-source AI architecture
Sebastian Maier
Sovereign CollaborationOpen Source StackOperationsMaintenance
Timo and Robin from WZ-IT set up a RocketChat server for us - and I couldn't be more satisfied! From the initial consultation to the final implementation, everything was absolutely professional, efficient, and to my complete satisfaction. I particularly appreciate the clear communication, transparent pricing, and the comprehensive expertise that both bring to the table. Even after the setup, they take care of the maintenance, which frees up my time enormously and allows me to focus on other important areas of my business - with the good feeling that our IT is in the best hands. I can recommend WZ-IT without reservation and look forward to continuing our collaboration! (translated)

Sebastian Maier

Managing Director, Yonju GmbH

Yonju - business coaching and AI products.

Yonju
Get collaboration fully managed
Gabriel Sanz Señor
Production DeploymentCI/CDPaaSOperations
Counting on WZ-IT team was crucial, their expertise and solutions gave us the pace to deploy in production our services, even suggesting and performing improvements over our configuration and setup. We expect to keep counting on them for continuous maintenance of our services and implementation of new solutions.

Gabriel Sanz Señor

Managing Director, Odiseo Solutions

Odiseo Solutions - software engineering for the space industry.

Odiseo Solutions
Ship your prototype to production
Andrea Pawlowski
Architecture ConsultingSovereign Software SelectionOpen Source Strategy
I got to know Timo and Robin as dedicated and professional partners who make a lot of things possible for their clients that initially seem impossible. I felt very well advised. The services offered have thoroughly convinced me. (translated)

Andrea Pawlowski

Communications Manager, Golem.de

Golem.de - leading German IT news outlet.

Golem.de
Plan a sovereign open-source stack
Sonja Aßer
Software DevelopmentPHP ModernizationAPI Extension
With Timo and Robin, you're not only on the safe side technically - you also get the best human support! Whether it's quick help in everyday life or complex IT solutions: the guys from WZ-IT think along with you, act quickly and speak a language you understand. The collaboration is uncomplicated, reliable and always on an equal footing. That makes IT fun - and above all: it works! Big thank you to the team! (translated)

Sonja Aßer

Data Manager, ARGE

ARGE Neue Medien - master data & digital standards for plumbing and building technology.

ARGE
Modernize your legacy software
Aleksandr Shuliko
Cloud MigrationAWS ExitProxmox81% Cost Reduction
I recently worked with Timo and the WZ-IT team, and honestly, it turned out to be one of the best tech decisions I have made for my business. Right from the start, Timo took the time to walk me through every step in a simple and calm way. No matter how many questions I had, he never rushed me. The results speak for themselves. With WZ-IT, we reduced our monthly expenses from $1,300 down to $250. This was a huge win for us.

Aleksandr Shuliko

CTO, EVA Real Estate, UAE

EVA Real Estate - leading real-estate agency in Dubai.

EVA Real Estate
Cut cloud cost - up to −81%
Pascal Hakkers
Managed ProxmoxClusterMonitoringHigh Availability
WZ-IT manages our Proxmox cluster reliably and professionally. The team handles continuous monitoring and regular updates for us and responds very quickly to any issues or inquiries. They also configure new nodes, systems, and applications that we need to add to our cluster. With WZ-IT's proactive support, our cluster and the business-critical applications running on it remain stable, and high availability is consistently ensured. We value the professional collaboration and the noticeable relief it brings to our daily operations.

Pascal Hakkers

Managing Director, Aphy B.V., Netherlands

Aphy - AI platform for hotel back-office.

Aphy
Build a high-availability Proxmox cluster
John Hellmerichs
Proxmox & VirtualizationBackupVPNSecurity
WZ-IT provided very competent support in implementing our server and virtualization infrastructure. As part of the project, a Proxmox-based virtualization environment was set up along with a virtual machine for our application systems. Additionally, a structured backup concept was implemented. A particular focus was on security: the setup of a VPN tunnel and the clean implementation of encryption and access concepts were professionally executed. The structured consulting as well as the reliable and swift implementation deserve special mention. We are very satisfied with the services provided and are happy to recommend WZ-IT.

John Hellmerichs

Managing Director, AInergy GmbH

AInergy - consultancy for energy and facility management.

AInergy GmbH
Virtualize with Managed Proxmox
Matthias Zimmermann
Open Source ArchitectureImplementationTechnical Consulting
We have had very good experiences with Mr. Wevelsiep and WZ-IT. The consultation was professional, clearly understandable, and at fair prices. The team not only implemented our requirements but also thought along and proactively. Instead of just processing individual tasks, they provided us with well-founded explanations that strengthened our own understanding. WZ-IT took a lot of pressure off us with their structured approach - that was exactly what we needed and is the reason why we keep coming back. (translated)

Matthias Zimmermann

Managing Director, Annota GmbH

Annota - healthtech startup with an AI documentation assistant.

Annota
Design an open-source AI architecture
Sebastian Maier
Sovereign CollaborationOpen Source StackOperationsMaintenance
Timo and Robin from WZ-IT set up a RocketChat server for us - and I couldn't be more satisfied! From the initial consultation to the final implementation, everything was absolutely professional, efficient, and to my complete satisfaction. I particularly appreciate the clear communication, transparent pricing, and the comprehensive expertise that both bring to the table. Even after the setup, they take care of the maintenance, which frees up my time enormously and allows me to focus on other important areas of my business - with the good feeling that our IT is in the best hands. I can recommend WZ-IT without reservation and look forward to continuing our collaboration! (translated)

Sebastian Maier

Managing Director, Yonju GmbH

Yonju - business coaching and AI products.

Yonju
Get collaboration fully managed
Gabriel Sanz Señor
Production DeploymentCI/CDPaaSOperations
Counting on WZ-IT team was crucial, their expertise and solutions gave us the pace to deploy in production our services, even suggesting and performing improvements over our configuration and setup. We expect to keep counting on them for continuous maintenance of our services and implementation of new solutions.

Gabriel Sanz Señor

Managing Director, Odiseo Solutions

Odiseo Solutions - software engineering for the space industry.

Odiseo Solutions
Ship your prototype to production

Let's Talk About Your Idea

Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.

E-Mail
[email protected]

Leading companies trust WZ-IT

  • Rekorder
  • Keymate
  • Führerscheinmacher
  • SolidProof
  • ARGE
  • Boese VA
  • nextGYM
  • Maho Management
  • Golem.de
  • Millenium
  • Paritel
  • Yonju
  • EVADXB
  • Mr. Clipart
  • Aphy
  • Negosh
  • ABCO Water Systems
Timo Wevelsiep - Lead IoT Solutions Architect

Timo Wevelsiep

Lead IoT Solutions Architect

1/3 - Topic Selection33%

What is your inquiry about?

Select one or more areas where we can support you.