{"id":164,"date":"2026-10-24T15:45:50","date_gmt":"2026-10-24T15:45:50","guid":{"rendered":"https:\/\/strova.energy\/?page_id=164"},"modified":"2026-10-24T16:55:22","modified_gmt":"2026-10-24T16:55:22","slug":"security","status":"publish","type":"page","link":"https:\/\/strova.energy\/index.php\/security\/","title":{"rendered":"Security \u00b7 G\u00fcvenlik"},"content":{"rendered":"\n<link rel=\"preconnect\" href=\"https:\/\/fonts.googleapis.com\">\n<link rel=\"preconnect\" href=\"https:\/\/fonts.gstatic.com\" crossorigin>\n<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Sora:wght@400;500;600;700&#038;family=IBM+Plex+Sans:wght@400;500;600&#038;display=swap\" rel=\"stylesheet\">\n<style>\n:root{--night:#071510;--deep:#0B1E17;--deep2:#0F271E;--line:#1E3D30;--ink:#E9F2EC;--mute:#9DB5A8;--ring:#5BDF6A;--pin:#49B6F2;--pin-soft:rgba(73,182,242,.14);--ring-soft:rgba(91,223,106,.12)}\nhtml,body{background:var(--night)!important;margin:0}\nbody .wp-site-blocks,body main,body .entry-content,body .wp-block-post-content{padding:0!important;margin:0!important;max-width:none!important}\n#sx,#sx *{box-sizing:border-box}\n#sx{color:var(--ink);font:400 17px\/1.6 \"IBM Plex Sans\",system-ui,sans-serif;-webkit-font-smoothing:antialiased;overflow-x:hidden}\n#sx a{color:var(--pin);text-decoration:none}\n#sx a:hover{text-decoration:underline}\n#sx :focus-visible{outline:2px solid var(--pin);outline-offset:3px;border-radius:4px}\n#sx h1,#sx h2,#sx h3{font-family:Sora,system-ui,sans-serif;color:var(--ink);margin:0;letter-spacing:-.02em}\n#sx h2{font-size:clamp(30px,4vw,46px);line-height:1.1;font-weight:600;max-width:18ch}\n#sx h3{font-size:21px;line-height:1.3;font-weight:600}\n#sx p{margin:0}\n#sx .w{max-width:1180px;margin:0 auto;padding:0 28px}\n#sx section{padding:72px 0;border-top:1px solid var(--line)}\n#sx .lede{color:var(--mute);font-size:19px;max-width:58ch;margin-top:14px}\n#sx [lang]{display:none}\n#sx.l-en [lang=\"en\"],#sx.l-tr [lang=\"tr\"]{display:revert}\n#sx.l-en span[lang=\"en\"],#sx.l-tr span[lang=\"tr\"]{display:inline}\n#sx.l-en [lang=\"tr\"],#sx.l-tr [lang=\"en\"]{display:none!important}\n#sx.l-en .gal figcaption b[lang=\"en\"],#sx.l-tr .gal figcaption b[lang=\"tr\"]{display:block}\n\n\/* header *\/\n#sx .hd{position:sticky;top:0;z-index:20;background:rgba(7,21,16,.86);backdrop-filter:blur(10px);border-bottom:1px solid var(--line)}\n#sx .hd .w{display:flex;align-items:center;gap:28px;height:88px}\n#sx .hd img{height:60px;width:auto;display:block}\n#sx .hd nav{display:flex;gap:24px;margin-left:auto;font-size:15px}\n#sx .hd nav a{color:var(--mute)}\n#sx .hd nav a:hover{color:var(--ink);text-decoration:none}\n#sx .lang{display:flex;border:1px solid var(--line);border-radius:999px;overflow:hidden}\n#sx .lang button{background:none;border:0;color:var(--mute);font:500 13px Sora,sans-serif;padding:6px 12px;cursor:pointer}\n#sx .lang button[aria-pressed=\"true\"]{background:var(--deep2);color:var(--ink)}\n#sx .btn{display:inline-flex;align-items:center;gap:10px;font:600 15px Sora,sans-serif;padding:13px 22px;border-radius:12px;border:1px solid transparent;cursor:pointer;text-decoration:none!important}\n#sx .btn-go{background:var(--ring);color:#06210F}\n#sx .btn-go:hover{background:#74ea81}\n#sx .btn-ghost{border-color:var(--line);color:var(--ink)}\n#sx .btn-ghost:hover{border-color:var(--mute)}\n#sx .hd .btn{padding:9px 16px;font-size:14px}\n#sx .hd .sx-login{order:3}\n#sx .hd .lang{order:2}\n#sx .hd .btn-go{order:4}\n#sx .hd nav{order:1}\n\n\/* hero *\/\n#sx .hero{border-top:0;padding:56px 0 64px;position:relative}\n#sx .hero .w{display:grid;grid-template-columns:1.1fr .9fr;gap:56px;align-items:center}\n#sx .live{display:inline-flex;align-items:center;gap:10px;color:var(--ring);font:500 15px Sora,sans-serif;margin-bottom:18px}\n#sx .live i{width:9px;height:9px;border-radius:50%;background:var(--ring);box-shadow:0 0 0 0 rgba(91,223,106,.6);animation:sx-pulse 2.4s infinite}\n@keyframes sx-pulse{0%{box-shadow:0 0 0 0 rgba(91,223,106,.55)}70%{box-shadow:0 0 0 12px rgba(91,223,106,0)}100%{box-shadow:0 0 0 0 rgba(91,223,106,0)}}\n#sx h1{font-size:clamp(44px,6.4vw,84px);line-height:1;font-weight:700;letter-spacing:-.035em}\n#sx .hero .lede{font-size:20px}\n#sx .ctas{display:flex;flex-wrap:wrap;gap:14px;margin-top:28px}\n#sx .facts{display:flex;flex-wrap:wrap;gap:10px 28px;margin-top:28px;color:var(--mute);font-size:15px}\n#sx .facts b{color:var(--ink);font-weight:600}\n#sx .socket{width:100%;max-width:440px;justify-self:center}\n#sx .socket svg{width:100%;height:auto;display:block;overflow:visible}\n#sx .socket .ring{fill:none;stroke:var(--ring);stroke-width:14}\n#sx .socket .pin{fill:var(--deep2);stroke:var(--line);stroke-width:2;transition:fill .5s,stroke .5s}\n#sx .socket .pin.on{fill:var(--pin);stroke:var(--pin)}\n#sx .socket .glow{fill:url(#sx-glow);opacity:.0;transition:opacity 1.2s}\n#sx .socket.full .glow{opacity:1}\n#sx .socket figcaption{text-align:center;color:var(--mute);font-size:14px;margin-top:18px}\n\n\/* audiences *\/\n#sx .aud{display:grid;grid-template-columns:300px 1fr;gap:48px;margin-top:36px}\n#sx .tabs{display:flex;flex-direction:column;border-left:1px solid var(--line)}\n#sx .tabs button{text-align:left;background:none;border:0;border-left:3px solid transparent;margin-left:-2px;padding:16px 20px;color:var(--mute);font:500 18px Sora,sans-serif;cursor:pointer}\n#sx .tabs button small{display:block;font:400 14px \"IBM Plex Sans\",sans-serif;color:var(--mute);opacity:.8;margin-top:2px}\n#sx .tabs button[aria-selected=\"true\"]{color:var(--ink);border-left-color:var(--ring)}\n#sx .panel{display:none}\n#sx .panel.on{display:grid;grid-template-columns:1fr;gap:32px}\n#sx .panel ul{columns:2;column-gap:32px}\n#sx .panel li{break-inside:avoid}\n#sx .panel h3{font-size:26px;margin-bottom:14px}\n#sx .panel ul{list-style:none;padding:0;margin:22px 0 0}\n#sx .panel li{padding:12px 0 12px 30px;border-top:1px solid var(--line);position:relative;color:var(--ink)}\n#sx .panel li::before{content:\"\";position:absolute;left:4px;top:21px;width:12px;height:12px;border-radius:50%;border:3px solid var(--ring)}\n#sx .panel li.soon::before{border-color:var(--mute)}\n#sx .panel li.soon{color:var(--mute)}\n#sx .shot{border-radius:14px;overflow:hidden;border:1px solid var(--line);background:var(--deep)}\n#sx .shot img{display:block;width:100%;height:auto}\n\n\/* tour *\/\n#sx .video{margin-top:32px;border-radius:18px;overflow:hidden;border:1px solid var(--line);aspect-ratio:16\/9;background:#000}\n#sx .video iframe{width:100%;height:100%;border:0;display:block}\n#sx .gal{display:grid;grid-template-columns:repeat(3,1fr);gap:28px 28px;margin-top:36px}\n#sx .gal figure{margin:0}\n#sx .gal figcaption{margin-top:14px}\n#sx .gal figcaption b{display:block;font:600 17px Sora,sans-serif;color:var(--ink)}\n#sx .gal figcaption span{color:var(--mute);font-size:15px}\n#sx .charge{margin-top:44px;padding-top:32px;border-top:1px solid var(--line);display:grid;grid-template-columns:280px 1fr;gap:40px;align-items:center}\n#sx .charge p{color:var(--mute);font-size:15px}\n#sx .charge p b{display:block;color:var(--ink);font:600 20px Sora,sans-serif;margin-bottom:4px}\n#sx .cells{display:grid;grid-template-columns:repeat(20,1fr);gap:4px;padding:6px;border:2px solid var(--line);border-radius:10px;position:relative}\n#sx .cells::after{content:\"\";position:absolute;right:-9px;top:50%;width:6px;height:18px;margin-top:-9px;border-radius:0 3px 3px 0;background:var(--line)}\n#sx .cells span{height:30px;border-radius:3px;background:var(--ring)}\n#sx .cells span.next{background:var(--pin-soft);border:1px solid var(--pin)}\n#sx .cells span.plan{background:transparent;border:1px dashed var(--line)}\n#sx .legend{display:flex;flex-wrap:wrap;gap:8px 22px;margin-top:12px;font-size:14px;color:var(--mute)}\n#sx .legend a{color:var(--pin)}\n\n\/* steps *\/\n#sx .steps{list-style:none;padding:0;margin:36px 0 0;display:grid;grid-template-columns:repeat(3,1fr);gap:28px;counter-reset:s}\n#sx .steps li{counter-increment:s;padding-top:22px;border-top:2px solid var(--line)}\n#sx .steps li::before{content:counter(s);font:700 15px Sora,sans-serif;color:var(--night);background:var(--ring);width:28px;height:28px;border-radius:50%;display:inline-flex;align-items:center;justify-content:center;margin-bottom:16px}\n#sx .steps p{color:var(--mute);margin-top:8px}\n#sx .steps code{font:500 14px\/1.5 ui-monospace,Menlo,monospace;color:var(--pin);word-break:break-all}\n\n\n\/* pilot *\/\n#sx .pilot .w{display:grid;grid-template-columns:1.15fr .85fr;gap:56px;align-items:start}\n#sx .offer{border:1px solid var(--ring);border-radius:18px;padding:34px;background:linear-gradient(160deg,var(--ring-soft),transparent 60%)}\n#sx .offer .big{font:700 clamp(46px,6vw,68px)\/1 Sora,sans-serif;color:var(--ring);letter-spacing:-.03em}\n#sx .offer .big + p{font:600 20px Sora,sans-serif;margin-top:10px}\n#sx .offer ul{list-style:none;padding:0;margin:24px 0 0}\n#sx .offer li{padding:9px 0;border-top:1px solid var(--line);color:var(--mute)}\n#sx .contact{display:flex;flex-direction:column;gap:12px;margin-top:30px}\n#sx .contact a{display:flex;justify-content:space-between;align-items:center;padding:16px 18px;border:1px solid var(--line);border-radius:12px;color:var(--ink);font:500 16px Sora,sans-serif}\n#sx .contact a:hover{border-color:var(--pin);text-decoration:none}\n#sx .contact a span{color:var(--mute);font:400 15px \"IBM Plex Sans\",sans-serif}\n\n\/* footer *\/\n#sx .map{height:150px;position:relative;overflow:hidden;border-top:1px solid var(--line)}\n#sx .map::before{content:\"\";position:absolute;inset:0;background:url(https:\/\/predixon.net\/wp-content\/uploads\/2026\/09\/tallinn_map_about.webp) center\/cover;filter:invert(88%) hue-rotate(180deg) brightness(.7) contrast(1.15) saturate(1.2)}\n#sx .map::after{content:\"\";position:absolute;inset:0;background:radial-gradient(40% 80% at 55% 45%,rgba(7,21,16,0),rgba(7,21,16,.5) 55%,#071510 100%)}\n#sx .map i{position:absolute;left:55%;top:45%;width:14px;height:14px;margin:-7px;border-radius:50%;background:var(--ring);z-index:2;animation:sx-pulse 2.4s infinite}\n#sx .ft{padding:36px 0 44px}\n#sx .ft .w{display:grid;grid-template-columns:1.2fr 1fr 1fr;gap:36px;font-size:15px;color:var(--mute)}\n#sx .ft img{height:64px;width:auto;margin-bottom:12px}\n#sx .ft h4{font:600 15px Sora,sans-serif;color:var(--ink);margin:0 0 10px}\n#sx .ft a{color:var(--mute)}\n#sx .ft a:hover{color:var(--ink)}\n#sx .ft .row{display:flex;flex-wrap:wrap;gap:6px 16px}\n#sx-wa{position:fixed;right:20px;bottom:20px;z-index:50;display:flex;align-items:center;gap:10px;background:#25D366;color:#062b14!important;border-radius:999px;padding:12px 18px 12px 14px;font:600 15px Sora,sans-serif;box-shadow:0 10px 30px rgba(0,0,0,.35);text-decoration:none!important}\n#sx-wa svg{width:22px;height:22px}\n\n@media (max-width:980px){\n#sx section{padding:52px 0}\n#sx .hero .w,#sx .pilot .w{grid-template-columns:1fr}\n#sx .socket{max-width:150px;order:-1;justify-self:start}\n#sx .socket figcaption{display:none}\n#sx .hero{padding-top:32px}\n#sx .aud{grid-template-columns:1fr;gap:24px}\n#sx .tabs{flex-direction:row;overflow-x:auto;border-left:0;border-bottom:1px solid var(--line)}\n#sx .tabs button{border-left:0;border-bottom:3px solid transparent;margin:0 0 -1px;white-space:nowrap;padding:12px 16px}\n#sx .tabs button small{display:none}\n#sx .tabs button[aria-selected=\"true\"]{border-bottom-color:var(--ring)}\n#sx .panel.on{grid-template-columns:1fr}\n#sx .panel ul{columns:1}\n#sx .gal{grid-template-columns:1fr 1fr}\n#sx .charge{grid-template-columns:1fr}\n#sx .steps{grid-template-columns:1fr}\n#sx .ft .w{grid-template-columns:1fr}\n#sx .hd nav{display:none}\n#sx .hd .w{gap:14px}\n#sx .lang{margin-left:auto}\n}\n@media (max-width:600px){\n#sx .w{padding:0 18px}\n#sx .gal{grid-template-columns:1fr}\n#sx .hd .btn{display:none}\n#sx .hd .btn.sx-login{display:inline-flex;padding:7px 12px;font-size:13px}\n#sx-wa span{display:none}\n#sx-wa{padding:14px}\n#sx .cells{grid-template-columns:repeat(10,1fr)}\n}\n@media (prefers-reduced-motion:reduce){#sx *,#sx *::before,#sx *::after{animation:none!important;transition:none!important}}\n\/* guide flipbook *\/\n#sx .fb{margin-top:32px;display:grid;grid-template-columns:auto minmax(0,560px) auto;align-items:center;gap:20px;justify-content:center}\n#sx .fb-page{position:relative;background:#fff;border-radius:10px;overflow:hidden;box-shadow:0 30px 60px rgba(0,0,0,.45);cursor:zoom-in;aspect-ratio:210\/297}\n#sx .fb-page img{width:100%;height:100%;object-fit:contain;display:block}\n#sx .fb-nav{width:48px;height:48px;border-radius:50%;border:1px solid var(--line);background:var(--deep);color:var(--ink);font:500 24px Sora,sans-serif;cursor:pointer}\n#sx .fb-nav:hover{border-color:var(--mute)}\n#sx .fb-bar{display:flex;flex-wrap:wrap;gap:18px;align-items:center;margin-top:20px;justify-content:center;color:var(--mute);font-size:15px}\n#sx .fb-bar button{background:none;border:1px solid var(--line);border-radius:10px;color:var(--ink);padding:8px 14px;font:500 14px Sora,sans-serif;cursor:pointer}\n#sx .fb-full{position:fixed;inset:0;z-index:100;background:rgba(3,10,8,.94);display:none;align-items:center;justify-content:center;gap:18px;padding:18px}\n#sx .fb-full.on{display:flex}\n#sx .fb-full img{max-height:calc(100vh - 36px);max-width:calc(100vw - 160px);background:#fff;border-radius:8px}\n#sx .fb-full .x{position:absolute;top:16px;right:18px}\n#sx .gh{border-top:0;padding:48px 0 64px}\n#sx .gh .w{text-align:center}\n#sx .gh h1{font-size:clamp(36px,5vw,60px);line-height:1.05}\n#sx .gh .lede{margin:18px auto 0}\n@media (max-width:600px){#sx .fb{grid-template-columns:1fr}#sx .fb-nav{display:none}#sx .fb-full .fb-nav{display:inline-block}#sx .fb-full img{max-width:calc(100vw - 24px)}}\n\n#sx .sec{padding:40px 0 64px}\n#sx .sec .w{max-width:900px}\n#sx .sec h1{font:700 clamp(34px,5vw,56px)\/1.05 Sora,sans-serif;margin:0}\n#sx .sec .lede{color:var(--mute);font-size:19px;max-width:62ch;margin:14px 0 0}\n#sx .sec h2{font:600 26px\/1.2 Sora,sans-serif;margin:44px 0 12px;padding-top:20px;border-top:1px solid var(--line)}\n#sx .sec p,#sx .sec li{max-width:72ch}\n#sx .sec ol,#sx .sec ul{padding-left:22px}\n#sx .sec li{margin:8px 0}\n#sx .sec li strong{color:var(--ring);font-weight:600}\n#sx .sec .tw{overflow-x:auto;margin:16px 0}\n#sx .sec table{border-collapse:collapse;width:100%;min-width:640px;font-size:15px}\n#sx .sec th,#sx .sec td{border:1px solid var(--line);padding:10px 12px;text-align:left;vertical-align:top}\n#sx .sec th{background:var(--deep2);font:600 14px Sora,sans-serif}\n#sx .sec h2{max-width:none}\n#sx .sec p{margin:0 0 12px}\n#sx .sec th,#sx .sec td{color:var(--ink)}\n#sx .sec td{color:var(--mute)}\n#sx .sec td:first-child{color:var(--ink)}\n\n\/* floating buttons: round WhatsApp + back to top (2026-10-24) *\/\n#sx-wa{width:56px;height:56px;padding:0!important;gap:0;justify-content:center;border-radius:50%;bottom:84px}\n#sx-wa svg{width:28px;height:28px}\n#sx-wa>span,.sx-vh{position:absolute!important;width:1px;height:1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap}\n#sx-top{position:fixed;right:24px;bottom:24px;z-index:50;width:48px;height:48px;border-radius:50%;display:flex;align-items:center;justify-content:center;background:rgba(10,30,20,.85);color:#e9f6ee;border:1px solid rgba(233,246,238,.35);box-shadow:0 8px 24px rgba(0,0,0,.35);cursor:pointer;opacity:0;visibility:hidden;transform:translateY(8px);transition:opacity .2s,transform .2s,visibility .2s;-webkit-backdrop-filter:blur(6px);backdrop-filter:blur(6px)}\n#sx-top.on{opacity:1;visibility:visible;transform:none}\n#sx-top:hover{border-color:#25D366;color:#25D366}\n#sx-top:focus-visible,#sx-wa:focus-visible{outline:3px solid #25D366;outline-offset:3px}\n#sx-top svg{width:22px;height:22px}\n@media (prefers-reduced-motion:reduce){#sx-top{transition:none}}\n<\/style>\n\n<div id=\"sx\" class=\"l-en\">\n<header class=\"hd\"><div class=\"w\">\n  <a href=\"https:\/\/strova.energy\/\" aria-label=\"Strova by Predixon\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/strova.energy\/wp-content\/uploads\/2026\/10\/strova-site-logo-stack-t.png\" alt=\"Strova by Predixon\" width=\"128\" height=\"60\"><\/a>\n  <nav aria-label=\"Main\">\n    <a href=\"https:\/\/strova.energy\/#for\"><span lang=\"en\">Who it&#8217;s for<\/span><span lang=\"tr\">Kimler i\u00e7in<\/span><\/a>\n    <a href=\"https:\/\/strova.energy\/#tour\"><span lang=\"en\">Platform tour<\/span><span lang=\"tr\">Platform turu<\/span><\/a>\n    <a href=\"https:\/\/strova.energy\/index.php\/guide\/\"><span lang=\"en\">User guide<\/span><span lang=\"tr\">K\u0131lavuz<\/span><\/a>\n    <a href=\"https:\/\/strova.energy\/index.php\/security\/\" aria-current=\"page\"><span lang=\"en\">Security<\/span><span lang=\"tr\">G\u00fcvenlik<\/span><\/a>\n    <a href=\"https:\/\/strova.energy\/#pilot\" data-tip-en=\"Use Strova software on your own chargers, free for 30 days\" data-tip-tr=\"Strova yaz\u0131l\u0131m\u0131n\u0131 kendi \u015farj cihazlar\u0131n\u0131zda 30 g\u00fcn \u00fccretsiz kullan\u0131n\" title=\"Use Strova software on your own chargers, free for 30 days\"><span lang=\"en\">Pilot<\/span><span lang=\"tr\">Pilot<\/span><\/a>\n  <\/nav>\n  <a class=\"btn btn-ghost sx-login\" href=\"https:\/\/app.strova.energy\/\" title=\"Strova console \u00b7 Strova konsolu\" target=\"_blank\" rel=\"noopener\"><span lang=\"en\">Customer login<\/span><span lang=\"tr\">M\u00fc\u015fteri giri\u015fi<\/span><\/a>\n  <div class=\"lang\" role=\"group\" aria-label=\"Language\"><button type=\"button\" data-l=\"en\" aria-pressed=\"true\">EN<\/button><button type=\"button\" data-l=\"tr\" aria-pressed=\"false\">TR<\/button><\/div>\n  <a class=\"btn btn-go\" href=\"https:\/\/strova.energy\/#pilot\" data-tip-en=\"Use Strova software on your own chargers, free for 30 days\" data-tip-tr=\"Strova yaz\u0131l\u0131m\u0131n\u0131 kendi \u015farj cihazlar\u0131n\u0131zda 30 g\u00fcn \u00fccretsiz kullan\u0131n\" title=\"Use Strova software on your own chargers, free for 30 days\"><span lang=\"en\">Try free for 30 days<\/span><span lang=\"tr\">30 g\u00fcn \u00fccretsiz deneyin<\/span><\/a>\n<\/div><\/header>\n\n<section class=\"sec\" id=\"security\"><div class=\"w\">\n  <h1><span lang=\"en\">Security<\/span><span lang=\"tr\">G\u00fcvenlik<\/span><\/h1>\n  <p class=\"lede\"><span lang=\"en\">How Strova keeps your chargers, your data and your team&#8217;s work safe. Last updated 24 October 2026.<\/span><span lang=\"tr\">Strova cihazlar\u0131n\u0131z\u0131, verinizi ve ekibinizin i\u015fini nas\u0131l korur. Son g\u00fcncelleme 24 Ekim 2026.<\/span><\/p>\n  <div lang=\"en\"><h2>In short<\/h2>\n<p>Strova protects three things while it runs your charging network: chargers connect only with your permission, your data is seen only by your team, and every action leaves a trace.<\/p>\n<p>This page explains what we do and how, without technical jargon. The measures described here run in Strova in production; some depend on what the charger model supports, as noted in each item. Strova does not hold a security certification yet, and this page makes no such claim.<\/p>\n<h2>How chargers connect<\/h2>\n<p>A charger can connect to Strova only as a registered charger, assigned to an organization, that (on chargers that support it) presents its own password.<\/p>\n<ol>\n<li><strong>Encrypted connection.<\/strong> Traffic between the charger and Strova is encrypted (TLS 1.2 or newer). As long as the charger verifies Strova&#8217;s certificate, a network device in between cannot read it.<\/li>\n<li><strong>A password per charger.<\/strong> Each charger gets a long, unguessable password of its own: generated in the console and entered on the charger at installation, or loaded at the factory on Predixon chargers. Every connection must present it. Strova stores only an irreversible hash of it and masks it in message logs. For the few models that cannot send a password, a Strova administrator can allow passwordless operation over an encrypted connection, only for charger identities of at least 16 characters; such chargers are flagged in the console.<\/li>\n<li><strong>Unknown chargers cannot charge.<\/strong> A charger with an unknown identity is refused and logged; until it is assigned to an organization it cannot accept cards or start a charge.<\/li>\n<li><strong>Attempt limits.<\/strong> Many wrong passwords for the same charger identity in a short time are turned away for a while. The real charger with the right password always gets in.<\/li>\n<li><strong>No new charges while offline.<\/strong> For models in our catalog, Strova itself sends the settings that stop the charger starting new charges while it cannot reach Strova, and re-checks them on every boot.<\/li>\n<\/ol>\n<p>The connection keeps being watched afterwards:<\/p>\n<ul>\n<li><strong>SIM lock.<\/strong> On chargers with a SIM card, Strova records the charger&#8217;s SIM. Depending on the organization&#8217;s setting (Off \/ Warn \/ Block) it raises an alarm or refuses the connection when the SIM changes. A legitimate change is approved in the console with &#8220;Approve new SIM&#8221; and is logged. The lock is off by default and works only on chargers that report their SIM number; when it is turned on, each charger&#8217;s current SIM becomes its approved SIM. A change is also e-mailed.<\/li>\n<li><strong>Connection network tracking.<\/strong> The operator network of each connection is recorded. If a charger connects from an operator network not seen in the last 30 days, a &#8220;New network&#8221; warning (medium priority, no e-mail) appears; the station page shows the last 10 connections.<\/li>\n<li><strong>Duplicate-connection alarm.<\/strong> If the same charger identity connects from a different network while the charger is connected and active, a high-priority alarm opens and an e-mail goes out. If the connection switches back and forth between two networks within minutes (A \u2192 B \u2192 A), a medium-priority alarm opens without e-mail, because modems with Wi-Fi and mobile fallback can behave this way too. Address changes within the same operator network do not count.<\/li>\n<li><strong>Encrypted connections only.<\/strong> Unencrypted connections are not accepted.<\/li>\n<li><strong>Compatibility test.<\/strong> Under our test protocol, a charger model that does not verify the server certificate cannot be rated &#8220;field tested&#8221;. The models in our catalog are being re-assessed against this step.<\/li>\n<\/ul>\n<h2>Intrusion scenarios: what could happen, what we do<\/h2>\n<p>In the worst case the damage stays with a single charger: its connection cannot be used to reach other stations, customer data, the console or the database.<\/p>\n<div class=\"tw\"><table>\n<thead>\n<tr>\n<th>Scenario<\/th>\n<th>What could happen<\/th>\n<th>What Strova does<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Someone knows your charger&#8217;s identity and tries to connect a fake charger<\/td>\n<td>Without the password it cannot connect (on chargers with a password)<\/td>\n<td>Per-charger password; failed attempts are logged and limited<\/td>\n<\/tr>\n<tr>\n<td>An unknown charger tries to join<\/td>\n<td>It cannot charge or accept cards<\/td>\n<td>Unknown chargers are refused and logged<\/td>\n<\/tr>\n<tr>\n<td>Using a charger&#8217;s connection to break into the system or reach another customer&#8217;s data<\/td>\n<td>Blocked by design<\/td>\n<td>A charger can only send standard messages in its own name; every message is checked and malformed ones rejected; data access is locked per organization<\/td>\n<\/tr>\n<tr>\n<td>Flooding the system with messages<\/td>\n<td>The effect stays with that charger<\/td>\n<td>Each charger runs separately; oversized messages close the connection; wrong-password attempts are limited<\/td>\n<\/tr>\n<tr>\n<td>The charger&#8217;s cover is opened and its modem or SIM card swapped<\/td>\n<td>The charger connects over the intruder&#8217;s line<\/td>\n<td>With the SIM lock on: warns or blocks when the SIM changes<\/td>\n<\/tr>\n<tr>\n<td>The charger is plugged into a foreign modem or network<\/td>\n<td>The connection comes from an unusual operator network<\/td>\n<td>&#8220;New network&#8221; warning and a list of recent connections<\/td>\n<\/tr>\n<tr>\n<td>The password is copied and the same identity connects from elsewhere<\/td>\n<td>Someone tries to send false records for that one station<\/td>\n<td>Duplicate-connection alarm (two networks at once: high priority and e-mail; switching between networks: medium priority)<\/td>\n<\/tr>\n<tr>\n<td>A network in between tries to decrypt the traffic<\/td>\n<td>It cannot, if the charger verifies Strova&#8217;s certificate<\/td>\n<td>Certificate verification is a separate step in our test protocol; the models in our catalog are being re-assessed against it<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<p>Someone who can open a charger&#8217;s cover has effectively taken over that charger. The goal is to notice it at once and keep the damage to that charger.<\/p>\n<h2>How your data is protected<\/h2>\n<p>Each organization&#8217;s data is separated in the database itself; a user of one customer cannot see a single row of another customer.<\/p>\n<ul>\n<li><strong>Separation in the database itself.<\/strong> Who sees what is defined in the database rules, not only in the screens. Even if a screen had a bug, the database would not return rows a user is not allowed to see.<\/li>\n<li><strong>Roles and locations.<\/strong> Owner, admin, operator and viewer roles are separate. A location manager sees only their own location; for example, a hotel&#8217;s reception sees only that hotel.<\/li>\n<li><strong>Database in the European Union.<\/strong> The database runs in the EU (Frankfurt).<\/li>\n<li><strong>Minimal personal data.<\/strong> In hotel mode, unknown-card notifications show only the last 4 digits of a card number. Hotel guests&#8217; PINs are never stored in plain form. Partner summary screens contain no charging users, cards or personal data.<\/li>\n<li><strong>Every action leaves a trace.<\/strong> Remote commands, configuration, permission and tariff changes are written to an audit log with who did it and when.<\/li>\n<li><strong>Partner (reseller) access only with the customer&#8217;s consent.<\/strong> A partner sees only a summary of its customers. When support is needed, the customer grants time-limited access (up to 30 days); during it the partner works with operator rights, the console shows a &#8220;Support access&#8221; banner with its end date, each action is logged as &#8220;via partner&#8221;, and access ends the moment it expires or is revoked. If the customer leaves the partner, its data stays with the customer.<\/li>\n<li><strong>Secret keys never reach the browser.<\/strong> The console works only with the signed-in user&#8217;s identity; the system&#8217;s administrative keys live on the server only.<\/li>\n<\/ul>\n<h2>User accounts and the software itself<\/h2>\n<ul>\n<li><strong>Sign-in.<\/strong> The console accepts a password or a one-time code sent by e-mail. Charging users sign in to the app with an e-mail code.<\/li>\n<li><strong>Need to know.<\/strong> Users see only the organizations they belong to and the actions their role allows. Exceptions are time-limited partner access granted by the customer and Predixon&#8217;s authorized platform administrators.<\/li>\n<li><strong>Every release is checked before it goes live.<\/strong> Each development step passes more than 5,500 automated tests and a separate code-review step; separation of data between organizations is tested on its own.<\/li>\n<li><strong>Internal panels are locked.<\/strong> The development team&#8217;s internal panel is open only to the founders, with a code sent by e-mail.<\/li>\n<\/ul>\n<h2>Next step<\/h2>\n<p><strong>Charger certificates (OCPP security profile 3):<\/strong> a digital certificate per charger instead of a password. Nothing without a certificate can connect, and a stolen password becomes useless. Because it needs charger support and certificates installed in the field, it will be rolled out step by step on chargers that support it.<\/p>\n<h2>Recommendations for operators<\/h2>\n<ul>\n<li>Use charger-specific locks instead of universal keys on charger covers.<\/li>\n<li>Prefer chargers that report an error when the cover is opened; Strova turns the reported error into an alarm.<\/li>\n<li>Change the factory password of the charger&#8217;s own settings page.<\/li>\n<li>Do not switch off server-certificate verification on the charger.<\/li>\n<li>Give each person their own console account; remove a leaver&#8217;s account at once.<\/li>\n<\/ul><\/div>\n  <div lang=\"tr\"><h2>K\u0131saca<\/h2>\n<p>Strova, \u015farj a\u011f\u0131n\u0131z\u0131 y\u00f6netirken \u00fc\u00e7 \u015feyi korur: cihazlar\u0131n\u0131z\u0131n yaln\u0131z sizin izninizle ba\u011flanmas\u0131n\u0131, verinizin yaln\u0131z sizin ekibinizce g\u00f6r\u00fclmesini ve yap\u0131lan her i\u015flemin izinin kalmas\u0131n\u0131.<\/p>\n<p>Bu sayfa neyi nas\u0131l yapt\u0131\u011f\u0131m\u0131z\u0131 teknik bilgi gerektirmeden anlat\u0131r. Burada yaz\u0131lan \u00f6nlemler Strova&#8217;da canl\u0131da \u00e7al\u0131\u015f\u0131r; baz\u0131lar\u0131 cihaz modelinin deste\u011fine ba\u011fl\u0131d\u0131r ve bu durumlar ilgili maddede belirtilmi\u015ftir. Strova hen\u00fcz bir g\u00fcvenlik sertifikas\u0131na sahip de\u011fildir; bu sayfada b\u00f6yle bir iddia yoktur.<\/p>\n<h2>Cihazlar nas\u0131l ba\u011flan\u0131r<\/h2>\n<p>Bir \u015farj cihaz\u0131 Strova&#8217;ya ancak tan\u0131mlanm\u0131\u015f, bir organizasyona atanm\u0131\u015f ve (parola deste\u011fi olan cihazlarda) kendi parolas\u0131n\u0131 bilen bir cihaz olarak ba\u011flanabilir.<\/p>\n<ol>\n<li><strong>\u015eifreli ba\u011flant\u0131.<\/strong> Cihazla Strova aras\u0131ndaki ileti\u015fim internette \u015fifreli (TLS 1.2 veya \u00fcst\u00fc) ta\u015f\u0131n\u0131r. Cihaz Strova&#8217;n\u0131n sertifikas\u0131n\u0131 do\u011frulad\u0131\u011f\u0131 s\u00fcrece aradaki bir a\u011f cihaz\u0131 i\u00e7eri\u011fi okuyamaz.<\/li>\n<li><strong>Her cihaza \u00f6zel parola.<\/strong> Her cihaza, yaln\u0131z ona ait ve tahmin edilemeyecek uzunlukta bir parola verilir: konsolda \u00fcretilip kurulumda cihaza girilir ya da Predixon cihazlar\u0131na \u00fcretimde y\u00fcklenir. Her ba\u011flant\u0131da bu parola sorulur. Parola Strova&#8217;da a\u00e7\u0131k h\u00e2lde de\u011fil, geri \u00e7\u00f6z\u00fclemeyen bir \u00f6zet olarak saklan\u0131r; mesaj kay\u0131tlar\u0131nda gizlenir. Parola desteklemeyen az say\u0131daki modelde, yaln\u0131z Strova y\u00f6neticisinin karar\u0131yla ve en az 16 karakterlik cihaz kimli\u011fiyle, \u015fifreli ba\u011flant\u0131 \u00fczerinden parolas\u0131z \u00e7al\u0131\u015fma a\u00e7\u0131labilir; bu cihazlar konsolda i\u015faretlidir.<\/li>\n<li><strong>Tan\u0131ms\u0131z cihaz \u015farj veremez.<\/strong> Kimli\u011fi bilinmeyen bir cihaz\u0131n ba\u011flant\u0131s\u0131 reddedilir ve kayda ge\u00e7er; bir organizasyona atanmadan kart kabul edemez, \u015farj ba\u015flatamaz.<\/li>\n<li><strong>Deneme s\u0131n\u0131r\u0131.<\/strong> Ayn\u0131 cihaz kimli\u011fiyle k\u0131sa s\u00fcrede \u00e7ok say\u0131da yanl\u0131\u015f parola denenirse yeni denemeler bir s\u00fcre geri \u00e7evrilir. Do\u011fru parolay\u0131 bilen ger\u00e7ek cihaz her zaman ba\u011flan\u0131r.<\/li>\n<li><strong>\u0130nternet yokken yeni \u015farj yok.<\/strong> Katalo\u011fumuzdaki modellerde Strova, cihaza Strova&#8217;ya ula\u015famad\u0131\u011f\u0131 s\u00fcrede yeni \u015farj ba\u015flatmama ayarlar\u0131n\u0131 kendisi g\u00f6nderir ve her a\u00e7\u0131l\u0131\u015fta denetler.<\/li>\n<\/ol>\n<p>Ba\u011flant\u0131 bundan sonra da izlenir:<\/p>\n<ul>\n<li><strong>SIM kilidi.<\/strong> SIM kartl\u0131 cihazlarda Strova cihaz\u0131n SIM&#8217;ini kaydeder. Organizasyon ayar\u0131na g\u00f6re (Kapal\u0131 \/ Uyar \/ Engelle) SIM de\u011fi\u015fince alarm verir ya da ba\u011flant\u0131y\u0131 reddeder. Me\u015fru de\u011fi\u015fiklik konsoldan &#8220;Yeni SIM&#8217;i onayla&#8221; ile yap\u0131l\u0131r ve kayda ge\u00e7er. Kilit varsay\u0131lan olarak kapal\u0131d\u0131r ve yaln\u0131z SIM numaras\u0131n\u0131 bildiren cihazlarda \u00e7al\u0131\u015f\u0131r; a\u00e7\u0131ld\u0131\u011f\u0131nda her cihaz\u0131n o anki SIM&#8217;i onayl\u0131 kabul edilir. De\u011fi\u015fiklikte alarm e-postayla da bildirilir.<\/li>\n<li><strong>Ba\u011flant\u0131 a\u011f\u0131 takibi.<\/strong> Her ba\u011flant\u0131n\u0131n geldi\u011fi operat\u00f6r a\u011f\u0131 kaydedilir. Cihaz son 30 g\u00fcnde g\u00f6r\u00fclmemi\u015f bir operat\u00f6r a\u011f\u0131ndan ba\u011flan\u0131rsa &#8220;Yeni a\u011f&#8221; uyar\u0131s\u0131 (orta \u00f6ncelik, e-posta yok) \u00e7\u0131kar; istasyon sayfas\u0131nda son 10 ba\u011flant\u0131 g\u00f6r\u00fcn\u00fcr.<\/li>\n<li><strong>\u00c7ift ba\u011flant\u0131 alarm\u0131.<\/strong> Cihaz ba\u011fl\u0131 ve \u00e7al\u0131\u015f\u0131rken ayn\u0131 cihaz kimli\u011fiyle ba\u015fka bir a\u011fdan ba\u011flant\u0131 kurulursa y\u00fcksek \u00f6ncelikli alarm a\u00e7\u0131l\u0131r ve e-posta gider. Ba\u011flant\u0131 k\u0131sa s\u00fcrede iki a\u011f aras\u0131nda gidip gelirse (A \u2192 B \u2192 A) orta \u00f6ncelikli alarm a\u00e7\u0131l\u0131r, e-posta g\u00f6nderilmez; \u00e7\u00fcnk\u00fc Wi-Fi ve mobil yedekli modemler de b\u00f6yle davranabilir. Ayn\u0131 operat\u00f6r a\u011f\u0131 i\u00e7indeki adres de\u011fi\u015fiklikleri alarm say\u0131lmaz.<\/li>\n<li><strong>Yaln\u0131z \u015fifreli ba\u011flant\u0131.<\/strong> \u015eifresiz ba\u011flant\u0131 kabul edilmez.<\/li>\n<li><strong>Uyumluluk testi.<\/strong> Test protokol\u00fcm\u00fcze g\u00f6re, sunucu sertifikas\u0131n\u0131 do\u011frulamayan bir cihaz modeli &#8220;sahada test edildi&#8221; say\u0131lmaz. Katalo\u011fumuzdaki modeller bu ad\u0131ma g\u00f6re yeniden de\u011ferlendiriliyor.<\/li>\n<\/ul>\n<h2>S\u0131zma senaryolar\u0131: ne olur, ne yap\u0131yoruz<\/h2>\n<p>En k\u00f6t\u00fc durumda zarar tek bir cihazla s\u0131n\u0131rl\u0131 kal\u0131r: bir cihaz\u0131n ba\u011flant\u0131s\u0131 \u00fczerinden ba\u015fka istasyonlara, m\u00fc\u015fteri verilerine, konsola ya da veritaban\u0131na ge\u00e7ilemez.<\/p>\n<div class=\"tw\"><table>\n<thead>\n<tr>\n<th>Senaryo<\/th>\n<th>Ne olabilir<\/th>\n<th>Strova ne yap\u0131yor<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Biri cihaz kimli\u011finizi biliyor ve sahte cihazla ba\u011flanmaya \u00e7al\u0131\u015f\u0131yor<\/td>\n<td>Parolas\u0131n\u0131 bilmedi\u011fi i\u00e7in ba\u011flanamaz (parolal\u0131 cihazlarda)<\/td>\n<td>Cihaza \u00f6zel parola; yanl\u0131\u015f denemeler kayda ge\u00e7er ve s\u0131n\u0131rlan\u0131r<\/td>\n<\/tr>\n<tr>\n<td>Bilinmeyen bir cihaz sisteme girmeye \u00e7al\u0131\u015f\u0131yor<\/td>\n<td>\u015earj veremez, kart kabul edemez<\/td>\n<td>Tan\u0131ms\u0131z cihaz\u0131n ba\u011flant\u0131s\u0131 reddedilir ve kayda ge\u00e7er<\/td>\n<\/tr>\n<tr>\n<td>Bir cihaz\u0131n ba\u011flant\u0131s\u0131 \u00fczerinden sisteme dalmak, ba\u015fka m\u00fc\u015fterinin verisine ula\u015fmak<\/td>\n<td>Tasar\u0131m gere\u011fi engellenir<\/td>\n<td>Cihaz yaln\u0131z kendi ad\u0131na standart mesaj g\u00f6nderebilir; her mesaj denetlenir, bozuk olan reddedilir; veri eri\u015fimi organizasyon baz\u0131nda kilitli<\/td>\n<\/tr>\n<tr>\n<td>Mesaj ya\u011fd\u0131rarak sistemi yormak<\/td>\n<td>Etki o cihazla s\u0131n\u0131rl\u0131 kal\u0131r<\/td>\n<td>Her cihaz ayr\u0131 \u00e7al\u0131\u015f\u0131r; \u00e7ok b\u00fcy\u00fck mesajlar ba\u011flant\u0131y\u0131 kapat\u0131r; yanl\u0131\u015f parola denemeleri s\u0131n\u0131rlan\u0131r<\/td>\n<\/tr>\n<tr>\n<td>Cihaz\u0131n kapa\u011f\u0131 a\u00e7\u0131l\u0131p modem ya da SIM kart de\u011fi\u015ftiriliyor<\/td>\n<td>Cihaz sald\u0131rgan\u0131n hatt\u0131 \u00fczerinden ba\u011flan\u0131r<\/td>\n<td>SIM kilidi a\u00e7\u0131ksa: SIM de\u011fi\u015fince uyar\u0131r ya da ba\u011flant\u0131y\u0131 engeller<\/td>\n<\/tr>\n<tr>\n<td>Cihaz yabanc\u0131 bir modem ya da a\u011fa tak\u0131l\u0131yor<\/td>\n<td>Ba\u011flant\u0131 al\u0131\u015f\u0131lmad\u0131k bir operat\u00f6r a\u011f\u0131ndan gelir<\/td>\n<td>&#8220;Yeni a\u011f&#8221; uyar\u0131s\u0131 ve son ba\u011flant\u0131lar\u0131n listesi<\/td>\n<\/tr>\n<tr>\n<td>Parola kopyalan\u0131p ba\u015fka yerden ayn\u0131 kimlikle ba\u011flan\u0131l\u0131yor<\/td>\n<td>O tek istasyon ad\u0131na sahte kay\u0131t g\u00f6nderilmeye \u00e7al\u0131\u015f\u0131l\u0131r<\/td>\n<td>\u00c7ift ba\u011flant\u0131 alarm\u0131 (ayn\u0131 anda iki a\u011fdan: y\u00fcksek \u00f6ncelik ve e-posta; a\u011flar aras\u0131nda gidip gelme: orta \u00f6ncelik)<\/td>\n<\/tr>\n<tr>\n<td>Araya giren a\u011f \u015fifreli trafi\u011fi \u00e7\u00f6zmeye \u00e7al\u0131\u015f\u0131yor<\/td>\n<td>Cihaz Strova&#8217;n\u0131n sertifikas\u0131n\u0131 do\u011fruluyorsa \u00e7\u00f6zemez<\/td>\n<td>Test protokol\u00fcm\u00fczde sertifika do\u011frulamas\u0131 ayr\u0131 bir ad\u0131m; katalo\u011fumuzdaki modeller bu ad\u0131ma g\u00f6re yeniden de\u011ferlendiriliyor<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<p>Cihaz\u0131n kapa\u011f\u0131n\u0131 a\u00e7abilen biri o cihaz\u0131 ele ge\u00e7irmi\u015f say\u0131l\u0131r. Bu y\u00fczden ama\u00e7, bunu hemen fark etmek ve zarar\u0131 o cihazla s\u0131n\u0131rlamakt\u0131r.<\/p>\n<h2>Veriniz nas\u0131l korunur<\/h2>\n<p>Her organizasyonun verisi veritaban\u0131 d\u00fczeyinde ayr\u0131d\u0131r; bir m\u00fc\u015fterinin kullan\u0131c\u0131s\u0131 ba\u015fka bir m\u00fc\u015fterinin tek sat\u0131r\u0131n\u0131 g\u00f6remez.<\/p>\n<ul>\n<li><strong>Organizasyon ayr\u0131m\u0131 veritaban\u0131n\u0131n kendisinde.<\/strong> Kimin neyi g\u00f6rece\u011fi uygulama ekran\u0131nda de\u011fil, veritaban\u0131n\u0131n kurallar\u0131nda tan\u0131ml\u0131d\u0131r. Ekranda bir hata olsa bile veritaban\u0131 yetkisiz sat\u0131r\u0131 vermez.<\/li>\n<li><strong>Rol ve lokasyon yetkisi.<\/strong> Sahip, y\u00f6netici, operat\u00f6r ve izleyici rolleri ayr\u0131d\u0131r. Bir lokasyon y\u00f6neticisi yaln\u0131z kendi lokasyonunu g\u00f6r\u00fcr; \u00f6rne\u011fin bir otelin resepsiyonu yaln\u0131z kendi otelini.<\/li>\n<li><strong>Veritaban\u0131 Avrupa Birli\u011fi&#8217;nde.<\/strong> Veritaban\u0131 AB&#8217;de (Frankfurt) \u00e7al\u0131\u015f\u0131r.<\/li>\n<li><strong>Ki\u015fisel veri en aza indirilir.<\/strong> Otel modundaki tan\u0131ms\u0131z kart bildirimlerinde kart numaras\u0131n\u0131n yaln\u0131z son 4 hanesi g\u00f6r\u00fcn\u00fcr. Otel misafirlerinin PIN&#8217;i a\u00e7\u0131k saklanmaz. Bayi \u00f6zet ekranlar\u0131nda \u015farj kullan\u0131c\u0131s\u0131, kart ya da ki\u015fisel veri yer almaz.<\/li>\n<li><strong>Her i\u015flemin izi kal\u0131r.<\/strong> Uzaktan komutlar, ayar de\u011fi\u015fiklikleri, yetki ve tarife de\u011fi\u015fiklikleri kimin, ne zaman yapt\u0131\u011f\u0131yla denetim kayd\u0131na yaz\u0131l\u0131r.<\/li>\n<li><strong>Bayi (i\u015f orta\u011f\u0131) eri\u015fimi m\u00fc\u015fterinin izniyle.<\/strong> Bayi, m\u00fc\u015fterisinin yaln\u0131z \u00f6zetini g\u00f6r\u00fcr. Destek gerekti\u011finde m\u00fc\u015fteri s\u00fcreli izin verir (en \u00e7ok 30 g\u00fcn); izin s\u00fcresince bayi operat\u00f6r yetkisiyle \u00e7al\u0131\u015f\u0131r, ekranda &#8220;Destek eri\u015fimi&#8221; band\u0131 ve biti\u015f tarihi g\u00f6r\u00fcn\u00fcr, her i\u015flemi &#8220;bayi \u00fczerinden&#8221; diye kaydedilir; s\u00fcre dolunca ya da izin geri al\u0131n\u0131nca eri\u015fim hemen biter. M\u00fc\u015fteri bayiden ayr\u0131l\u0131rsa verisi kendisinde kal\u0131r.<\/li>\n<li><strong>Gizli anahtarlar taray\u0131c\u0131ya gitmez.<\/strong> Konsol yaln\u0131z oturum a\u00e7an kullan\u0131c\u0131n\u0131n kimli\u011fiyle \u00e7al\u0131\u015f\u0131r; sistemin y\u00f6netici anahtarlar\u0131 yaln\u0131z sunucuda durur.<\/li>\n<\/ul>\n<h2>Kullan\u0131c\u0131 hesaplar\u0131 ve yaz\u0131l\u0131m\u0131n kendisi<\/h2>\n<ul>\n<li><strong>Giri\u015f.<\/strong> Konsola parola ya da e-postaya gelen tek kullan\u0131ml\u0131k kodla girilir. \u015earj kullan\u0131c\u0131lar\u0131 uygulamaya e-posta koduyla girer.<\/li>\n<li><strong>Bilmesi gereken bilir.<\/strong> Kullan\u0131c\u0131 yaln\u0131z \u00fcye oldu\u011fu organizasyonu ve rol\u00fcn\u00fcn izin verdi\u011fi i\u015flemleri g\u00f6r\u00fcr. M\u00fc\u015fterinin verdi\u011fi s\u00fcreli bayi eri\u015fimi ve Predixon&#8217;un yetkili platform y\u00f6neticileri bunun d\u0131\u015f\u0131ndad\u0131r.<\/li>\n<li><strong>Her s\u00fcr\u00fcm canl\u0131ya \u00e7\u0131kmadan denetlenir.<\/strong> Her geli\u015ftirme ad\u0131m\u0131 5.500&#8217;den fazla otomatik testten ve ayr\u0131 bir kod inceleme ad\u0131m\u0131ndan ge\u00e7er; \u00f6zellikle organizasyonlar aras\u0131 veri ayr\u0131m\u0131 ayr\u0131 testlerle s\u0131nan\u0131r.<\/li>\n<li><strong>\u0130\u00e7 paneller kilitli.<\/strong> Geli\u015ftirme ekibinin i\u00e7 paneline yaln\u0131z kurucular, e-postaya gelen kodla girebilir.<\/li>\n<\/ul>\n<h2>S\u0131radaki ad\u0131m<\/h2>\n<p><strong>Cihaz sertifikas\u0131 (OCPP g\u00fcvenlik profili 3):<\/strong> parola yerine her cihaza \u00f6zel bir dijital sertifika. Sertifikas\u0131 olmayan hi\u00e7bir \u015fey ba\u011flanamaz; parola \u00e7al\u0131nmas\u0131 anlams\u0131z h\u00e2le gelir. Cihaz\u0131n desteklemesini ve sertifikalar\u0131n sahada y\u00fcklenmesini gerektirdi\u011fi i\u00e7in destekleyen cihazlarla ad\u0131m ad\u0131m devreye al\u0131nacak.<\/p>\n<h2>\u0130\u015fletmeciye \u00f6neriler<\/h2>\n<ul>\n<li>Cihaz kapaklar\u0131nda \u00fcniversal anahtar yerine cihaza \u00f6zel kilit kullan\u0131n.<\/li>\n<li>Kapak a\u00e7\u0131l\u0131nca hata bildiren cihazlar\u0131 tercih edin; Strova cihaz\u0131n bildirdi\u011fi hatay\u0131 alarma \u00e7evirir.<\/li>\n<li>Cihaz\u0131n kendi ayar ekran\u0131n\u0131n fabrika parolas\u0131n\u0131 de\u011fi\u015ftirin.<\/li>\n<li>Cihazda sunucu sertifikas\u0131n\u0131 do\u011frulama ayar\u0131n\u0131 kapatmay\u0131n.<\/li>\n<li>Konsol hesaplar\u0131n\u0131 ki\u015fiye \u00f6zel a\u00e7\u0131n; ayr\u0131lan \u00e7al\u0131\u015fan\u0131n hesab\u0131n\u0131 hemen kald\u0131r\u0131n.<\/li>\n<\/ul><\/div>\n<\/div><\/section>\n\n<div class=\"map\" role=\"img\" aria-label=\"Predixon O\u00dc, Tallinn\"><i><\/i><\/div>\n<footer class=\"ft\"><div class=\"w\">\n  <div><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/strova.energy\/wp-content\/uploads\/2026\/10\/strova-site-logo-stack-t.png\" alt=\"Strova by Predixon\" width=\"136\" height=\"64\"><p><span lang=\"en\">A product of<\/span><span lang=\"tr\">Bir<\/span> <a href=\"https:\/\/predixon.net\" target=\"_blank\" rel=\"noopener\">Predixon O\u00dc<\/a><span lang=\"tr\"> \u00fcr\u00fcn\u00fc<\/span>, Tallinn, Estonia. \u00a9 2026<\/p><\/div>\n  <div><h4><span lang=\"en\">Contact<\/span><span lang=\"tr\">\u0130leti\u015fim<\/span><\/h4><p><a class=\"sx-mail\" href=\"#\" data-u=\"ofni\" data-d=\"ygrene.avorts\"><span class=\"sx-mail-t\">info [at] strova [dot] energy<\/span><\/a><br><a href=\"tel:+908502425572\">+90 850 242 55 72<\/a><\/p><\/div>\n  <div><h4><span lang=\"en\">Follow<\/span><span lang=\"tr\">Takip edin<\/span><\/h4><p class=\"row\"><a href=\"https:\/\/www.linkedin.com\/showcase\/strova-by-predixon\/\" target=\"_blank\" rel=\"noopener\">LinkedIn<\/a><a href=\"https:\/\/www.instagram.com\/strova.energy\/\" target=\"_blank\" rel=\"noopener\">Instagram<\/a><a href=\"https:\/\/www.youtube.com\/@predixon\" target=\"_blank\" rel=\"noopener\">YouTube<\/a><a href=\"https:\/\/wa.me\/908502425572\" target=\"_blank\" rel=\"noopener\">WhatsApp<\/a><\/p><h4 style=\"margin-top:18px\"><span lang=\"en\">Customers<\/span><span lang=\"tr\">M\u00fc\u015fteriler<\/span><\/h4><p><a href=\"https:\/\/app.strova.energy\/\" target=\"_blank\" rel=\"noopener\"><span lang=\"en\">Sign in to the console<\/span><span lang=\"tr\">Konsola giri\u015f<\/span><\/a><br><a href=\"https:\/\/strova.energy\/index.php\/security\/\"><span lang=\"en\">Security<\/span><span lang=\"tr\">G\u00fcvenlik<\/span><\/a><br><a href=\"https:\/\/strova.energy\/index.php\/privacy\/\"><span lang=\"en\">Privacy<\/span><span lang=\"tr\">Gizlilik ve KVKK<\/span><\/a><\/p><\/div>\n<\/div><\/footer>\n<button id=\"sx-top\" type=\"button\"><svg viewBox=\"0 0 24 24\" aria-hidden=\"true\"><path fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M12 19V5M5 12l7-7 7 7\"\/><\/svg><span class=\"sx-vh\"><span lang=\"en\">Back to top<\/span><span lang=\"tr\">Ba\u015fa d\u00f6n<\/span><\/span><\/button>\n<script>(function(){var b=document.getElementById('sx-top');if(!b)return;function u(){b.classList.toggle('on',window.scrollY>500)}window.addEventListener('scroll',u,{passive:true});u();b.addEventListener('click',function(){var r=window.matchMedia('(prefers-reduced-motion: reduce)').matches;window.scrollTo({top:0,behavior:r?'auto':'smooth'})})})();<\/script>\n<a id=\"sx-wa\" href=\"https:\/\/wa.me\/908502425572\" target=\"_blank\" rel=\"noopener\" aria-label=\"WhatsApp\"><svg viewBox=\"0 0 24 24\" aria-hidden=\"true\"><path fill=\"currentColor\" d=\"M12 2a10 10 0 0 0-8.6 15.1L2 22l5-1.3A10 10 0 1 0 12 2Zm0 18.2a8.2 8.2 0 0 1-4.2-1.2l-.3-.2-3 .8.8-2.9-.2-.3A8.2 8.2 0 1 1 12 20.2Zm4.5-6.1c-.2-.1-1.5-.7-1.7-.8s-.4-.1-.6.1-.6.8-.8 1-.3.2-.5.1a6.7 6.7 0 0 1-3.3-2.9c-.3-.4.3-.4.7-1.4a.5.5 0 0 0 0-.5l-.8-1.8c-.2-.5-.4-.4-.6-.4h-.5a1 1 0 0 0-.7.3 3 3 0 0 0-.9 2.2 5.2 5.2 0 0 0 1.1 2.7 11.8 11.8 0 0 0 4.5 4c1.7.7 2.3.8 3.2.6a2.7 2.7 0 0 0 1.8-1.2 2.2 2.2 0 0 0 .2-1.3c-.1-.1-.3-.2-.5-.3Z\"\/><\/svg><span><span lang=\"en\">Chat on WhatsApp<\/span><span lang=\"tr\">WhatsApp ile yaz\u0131n<\/span><\/span><\/a>\n<\/div>\n\n<script>\n(function(){\nvar root=document.getElementById('sx');if(!root)return;\nfunction qa(s){return root.querySelectorAll(s)}\nfunction store(k,v){try{if(v===undefined)return localStorage.getItem(k);localStorage.setItem(k,v)}catch(e){return null}}\nfunction setLang(l){\n root.className='l-'+l;document.documentElement.lang=l;\n qa('.lang button').forEach(function(b){b.setAttribute('aria-pressed',b.getAttribute('data-l')===l?'true':'false')});\n var msg=l==='tr'?'Merhaba, Strova hakk\u0131nda bilgi almak istiyorum.':'Hello, I would like to learn more about Strova.';\n qa('a[href^=\"https:\/\/wa.me\/\"]').forEach(function(a){a.href='https:\/\/wa.me\/908502425572?text='+encodeURIComponent(msg)});\n var wa=document.getElementById('sx-wa');if(wa){wa.href='https:\/\/wa.me\/908502425572?text='+encodeURIComponent(msg)}\n qa('[data-tip-en]').forEach(function(a){a.title=a.getAttribute('data-tip-'+l)});\n var d={en:\"How Strova protects EV chargers, operator data and every action: encrypted connections, per-charger passwords, SIM lock, data separation and audit logs.\",tr:\"Strova \u015farj cihazlar\u0131n\u0131, i\u015fletmeci verisini ve her i\u015flemi nas\u0131l korur: \u015fifreli ba\u011flant\u0131, cihaza \u00f6zel parola, SIM kilidi, veri ayr\u0131m\u0131 ve denetim kayd\u0131.\"};\n ['description','og:description'].forEach(function(n){var sel=n==='description'?'meta[name=\"description\"]':'meta[property=\"og:description\"]';var m=document.querySelector(sel);if(!m){m=document.createElement('meta');if(n==='description'){m.setAttribute('name',n)}else{m.setAttribute('property',n)}document.head.appendChild(m)}m.setAttribute('content',d[l])});\n store('strova_lang',l);\n}\nqa('.lang button').forEach(function(b){b.addEventListener('click',function(){setLang(b.getAttribute('data-l'))})});\nqa('.sx-mail').forEach(function(a){var u=a.getAttribute('data-u').split('').reverse().join(''),d=a.getAttribute('data-d').split('').reverse().join('');a.href='mailto:'+u+'@'+d;var t=a.querySelector('.sx-mail-t');if(t){t.textContent=u+'@'+d}});\nvar saved=store('strova_lang');var nav=(navigator.language||'').toLowerCase();\nsetLang(saved==='tr'||saved==='en'?saved:(nav.indexOf('tr')===0?'tr':'en'));\n})();\n<\/script>\n","protected":false},"excerpt":{"rendered":"<p>Who it&#8217;s forKimler i\u00e7in Platform tourPlatform turu User guideK\u0131lavuz SecurityG\u00fcvenlik PilotPilot Customer loginM\u00fc\u015fteri giri\u015fi ENTR Try free for 30 days30 g\u00fcn \u00fccretsiz deneyin SecurityG\u00fcvenlik How Strova keeps your chargers, your data and your team&#8217;s work safe. Last updated 24 October 2026.Strova cihazlar\u0131n\u0131z\u0131, verinizi ve ekibinizin i\u015fini nas\u0131l korur. Son g\u00fcncelleme 24 Ekim 2026. In short [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"strova-blank","meta":{"footnotes":""},"class_list":["post-164","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/strova.energy\/index.php\/wp-json\/wp\/v2\/pages\/164","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/strova.energy\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/strova.energy\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/strova.energy\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/strova.energy\/index.php\/wp-json\/wp\/v2\/comments?post=164"}],"version-history":[{"count":3,"href":"https:\/\/strova.energy\/index.php\/wp-json\/wp\/v2\/pages\/164\/revisions"}],"predecessor-version":[{"id":175,"href":"https:\/\/strova.energy\/index.php\/wp-json\/wp\/v2\/pages\/164\/revisions\/175"}],"wp:attachment":[{"href":"https:\/\/strova.energy\/index.php\/wp-json\/wp\/v2\/media?parent=164"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}