Product
The Spoke and the hub.
The Spoke sits on the plant network and polls the controllers read-only. It dials out to the hub over its own encrypted tunnel. You use the hub from any browser.
01 / Access
A controller's screen, in a browser tab.
Register a target once: a label, a fixed address, a port, a protocol. From then on the hub bridges it into a tab. The controller's own screen, a remote desktop, an embedded web page or any single port. Nothing is installed on the target or on the laptop. Each session is recorded: who, when, how much, and why it closed.
Site access
Sometimes the engineering tool has to run on a laptop. A grant gives one named person's laptop a tunnel to one device, for a fixed window.
A session as the browser sees it · recorded · expires on its own
- Grant
- One person, one device, one window. Default 4 hours.
- Enforcement
- Firewall rules at both ends, per device. Never the whole network.
- Expiry
- Automatic. A 30-second watchdog revokes anything past its time.
- Addressing
- Each site gets its own virtual /24, so two plants with the same LAN range never collide.
- Record
- Every grant and every session: in the audit log, and to your webhooks.
02 / Data
Every tag, on the record.
The Spoke polls tags from the common controller families; more on request. Polling groups run on their own interval per controller. Configuration changes reach the device within 20 seconds and apply without a restart.
A dashboard as the hub renders it · trends, a gauge, totals and events
- Alarms
- Any 0/1 tag, edge-detected every 30 seconds. Notified on transitions only, to Telegram per controller or to any webhook.
- Events
- Device offline. Disk, memory or latency high. Rebooted. Grant created, revoked or expired. Tag alarm. Comm fault and restored.
- Calculations
- Up to 8 inputs each.
- Investigations
- Up to 8 signals: line, table, candlestick, stat or gauge.
- Dashboards
- Ordered sets of investigations. Playlists rotate up to 20 dashboards on a kiosk URL for wall displays.
- Explorer
- Click an alarm to open the window around it. Compare the last five.
- Device health
- Processor, memory, disk, temperature, tunnel latency and uptime, trended from one hour to seven days.
- Program backup
- Save controller programs into a normal network folder on the device, one folder per controller. Uploaded within 60 seconds, every version kept, one-click restore. Any file format.
03 / Device
The Spoke.
A single-board industrial gateway. Configured in a browser in about 15 minutes, it dials out, keeps itself current, and can be reset from the front panel.
- Network
- Two ports, configured independently: Wi-Fi uplink with an isolated controller LAN on Ethernet, or the reverse. Hidden Wi-Fi networks supported.
- Addressing
- IP changes are staged. If the new address is not proven within 5 minutes, it reverts.
- Setup
- Three steps in a browser, about 15 minutes. Enter an activation code such as
SPK-7QF4-K2MP-9RTX; the device shows online within a minute. Nothing to approve. - Buffer mode
- The default. Store-and-forward with original timestamps: no loss, no duplicates on replay.
- Backup mode
- A local copy on the device, replicated to the hub. Dashboards render on site with the tunnel down.
- Local mode
- Data never leaves the site. Heartbeat and health still reach the hub, every 30 seconds, in every mode.
- Updates
- Signed. Checked every 30 minutes, installed unattended. If the new version fails its 90-second health check, it rolls back.
- Reset
- Factory reset from the UI or the power button. Comes back on DHCP with a fixed setup address.
- Support
- A remote-support toggle opens an 8-hour window for a no-privilege account. Off by default.
04 / Trust
Security, as built.
- TunnelEncrypted, with the key generated on the device. Outbound only; no inbound ports at the site.
- IsolationEach organisation is isolated at the application layer with its own data bucket. A standing test enforces route coverage.
- Device tokenEach Spoke holds a write-only token scoped to its own bucket.
- AccountsTwo-factor authentication available per user. Sessions revocable from the server: log out everywhere.
- AuditEvery grant, session and administrative action is logged. Support access into your organisation is written into your audit trail.
- CodeUpdates are signed. Device code ships as bytecode only.
- HostingAWS Cape Town, af-south-1. The configuration database is snapshotted automatically, seven days kept.
Start with one site.
Sign up in a browser, activate a Spoke, open a controller.