Central, role-based and auditable browser access to distributed water treatment plants - built and operated by WZ-IT, delivered from a DACH base to Australia

ABCO Water Systems is an Australian water and wastewater treatment specialist headquartered at 17 Brant Rd, Kelmscott, Western Australia (WA 6111). The company delivers systems for distributed, often hard-to-reach sites.
ABCO Water Systems needed a platform that lets authorized users securely access HMIs, web interfaces and related plant networks without local VPN clients, manual tool setup or directly exposed plant targets.
ABCO Water Systems
Australia (Western Australia)
Water and wastewater treatment (critical infrastructure)
Make distributed plants securely and centrally accessible - without local VPN clients or exposed plant targets
AB-View: a central portal with Apache Guacamole, WireGuard, RBAC, session tokens and audit logs
Live platform in production with central, controlled and scalable plant access
Australia's water sector faces regulatory pressure to digitalise, tightening critical-infrastructure obligations and an acute skills shortage at remote sites at the same time. Secure, centralised remote access to distributed assets is shifting from optional to mandatory - exactly the pattern AB-View already runs in production for ABCO Water Systems.
A draft National Water Agreement unveiled in June 2025 shifts Australian water utilities from infrastructure build-out toward measurable performance and accountability - making technology a condition of continued funding and regulatory approval.
The Security of Critical Infrastructure Act 2018 lists 'water and sewerage' among 11 critical sectors. Responsible entities must run a risk management programme (CIRMP); approved frameworks are ISO 27001, NIST CSF and the ASD Essential Eight. Significant incidents must be reported within 12 hours, and CIRMP failures can cost up to AUD 660,000 per day.
The 2025 OT/ICS market is phasing out VPN and jump-server architectures in favour of clientless, HTML5/browser-based Zero-Trust access - with role-based access control (RBAC), time-bound least-privilege sessions and session recording as audit-ready evidence.
The median age in the Australian water sector is 47; a 2025 report on NSW local water utilities found 59% of the workforce over 50. In very-remote regions, more than 80% of employers cite location for low applicant numbers - a strong case for central remote access over costly on-site visits.
ABCO Water Systems needed a platform that lets authorized users securely access HMIs, web interfaces and related plant networks without local VPN clients, manual tool setup or directly exposed plant targets.
WZ-IT developed AB-View as a web portal for plants, devices, users, permissions, sessions and auditing. Site connectivity runs through WireGuard tunnels; users access VNC and Web HMIs directly from the browser.
Plant and device management for plants, HMIs, Web HMIs and documents in one shared interface
VNC HMIs via Apache Guacamole and Web HMIs via a controlled reverse proxy - without client setup for end users
Permission checks before every access, short-lived session tokens and traceability for security-relevant actions
WireGuard-based plant connectivity, health checks, server monitoring and support for new as well as existing customer networks
AB-View consistently separates users, access logic and plant networks. The portal checks permissions before every access; plant targets are never reachable directly from the internet, only through the gateway and WireGuard tunnels. Access happens clientless in the browser - no software needs to be installed for end users.
Access straight from the browser, no client install, multi-tenant
RBAC, short-lived session tokens, permission checks and audit logs
Apache Guacamole for VNC HMIs, controlled reverse proxy for Web HMIs
WireGuard tunnels to distributed water treatment plants, including legacy networks
Permission check before every access. Plant targets stay behind the gateway and WireGuard - never exposed directly to the internet.
Vendor-neutral, auditable open-source components instead of a proprietary appliance - EU/sovereignty-friendly and free of vendor lock-in.
Live Platform
AB-View is used in production
Central Access
HMIs and Web HMIs through one portal
Controlled Access
Roles, sessions and auditing
Scalable
New plants can be connected in a standardized way
WZ-IT is a builder-operator, not a reseller: we own the full stack of central portal, RBAC, audit logging, WireGuard mesh and Apache Guacamole browser access - and already run it in production with AB-View. This is demonstrated capability, not a slide.
We build and operate the full remote-management/provisioning stack ourselves - in production, not as a concept.
Vendor-neutral, auditable components without appliance lock-in that map cleanly onto ISO 27001, NIST CSF and Essential Eight as well as NIS2-grade controls.
While the market is only now phasing out VPNs and jump servers, we already ship clientless browser access with least-privilege, session tokens and audit logs today.
Unlike TeamViewer, IXON or per-device licences, each customer gets scoped, role-based and auditable access to only their HMIs - with no exposed plant targets.
The same remote-management pattern is proven across Australian critical water infrastructure (ABCO/AB-View) and DACH IoT machine fleets (nextGYM) - across sectors and countries, built and operated from a DACH base.
Our productized offer: secure remote access, RBAC, audit trails and multi-tenant portals for distributed sites and IoT fleets.
View serviceCustom platforms and applications - from architecture to production operations, sovereign and EU-hosted.
View overviewWe build and operate platforms for distributed industrial sites, remote locations and infrastructure-adjacent applications.
No risk: worst case, you leave with a clearer understanding of your project than before.


“WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.”
Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.
Timo Wevelsiep
Lead IoT Solutions Architect

