Connect your
factory floor
Harness the power of standardized remote access and gain valuable insights from your machine data to foster collaboration and ensure robust security. Together, we can drive your success to new heights.
Much more than
remote access
Our gateway enables both secure remote access and data collection capabilities on your industrial equipment in a single dedicated hardware device or as software program to accommodate your specific setup.
Turnkey gateway
purpose-built for OT/ICS
Secomea connects to any Operational Technology equipment and Industrial Control System as plug-and-play for PLC, HMI, SCADA, USB (and even serial connection for legacy equipment) for full data tunneling support via Ethernet, UDP/TCP, Layer 2, Layer 3, web proxy.
Up and running
in one day
Secomea seamlessly integrates with your existing infrastructure allowing for a record-speed implementation – as fast as one production site per day. Onboard both IT and OT people without needing hours of training.
Multiple stakeholders,
one solution
Smooth collaboration between manufacturers and machine suppliers is key. With Secomea, you can standardize your remote access processes in a unified platform that enables secure communication for all parties involved.
Access your OT assets
from anywhere
Remotely access a machine directly from your browser window—no plugin, app, or extra configuration is needed on your computer. Transcend geographical barriers and service your machines remotely from any device.
Manage user access
Handle users’ access permissions, monitor their remote access sessions, and maintain an ongoing overview of the status of your machines on your factory floors.
Collect machine data
Gather data from your industrial equipment to detect potential issues and perform predictive maintenance. Rely on production metrics to optimize your operations and improve efficiency and uptime.
Mitigate risks and gain control
Map out your risk profile and roll out your global risk management strategy to secure every phase, from prevention to recovery. Be supported in navigating legal developments and ensuring cyber-physical safety, service availability, and overall compliance.
Exploring the Vulnerability Hub
Ensure your system
is up-to-date
With hundreds of gateways in many different locations, keeping track of the up-to-dateness of each software and hardware may be challenging. To help you monitor them, we developed the Vulnerability Hub, your go-to place for checking the security status of your remote access system.
Vulnerability Score
Instant insights
This score reflects your system's security based on software and hardware up-to-dateness. It gets automatically updated based on the currency status of your gateways.
Actionable tips
Next to the Vulnerability score, you'll find recommended steps to improve it, thus enhancing your security.
Firmware
Firmware updates
Easily spot which gateways are not running the latest firmware version so that you can quickly identify, locate, and update them.
Hardware
End of Life Notices
Stay ahead by easily detecting gateways whose models are approaching End of Life or End of Support to ensure timely replacements.
Four ways we deliver fast time to value
1.
Set up connections in 10 minutes
Our gateways effortlessly integrate with any OT network architecture. No need for changes to your existing infrastructure.
2.
Easy user access management
- Drag and drop granular user management
- Advanced grouping for bulk management of access rights
- Privileged access management with hierarchy-based user roles
- Integration via SCIM with the IAM solution you already use for secure authentication via SSO (Microsoft Entra ID, Azure B2C, Okta)
3.
Intuitive even for non-IT people
- Easy-to-use interface, no hours of training required
- No need to remember separate access credentials
- In-browser connection without installing plugins or applications
- Support for all remote access protocols (RDP, VNC, SSH, etc.)
4.
Implement Secomea in an entire site in just 1 day
Get your secure remote access operations up and running at record-speed, just one day per production facility.
IIoT gateways datasheets
Secomea’s gateway is available in both hardware and software versions, so you can choose the one that best suits your use case. Learn more about each model in our datasheets.
Reach new levels of efficiency in your industrial connectivity
Discover key features of our advanced
connectivity solutions
CONNECT TO MULTIPLE IIOT DEVICES SIMULTANEOUSLY
Rely on intelligent TLS-based VPN to connect to up to 100 devices of all types of industrial equipment via Ethernet, serial connection, or USB ports, using the equipment’s native protocols (e.g., Modbus, PROFINET, EtherCAT; Ethernet/IP, etc.)
SECURE AND EASY INTERNET ACCESS
Ensure easy and firewall-friendly Internet access via LAN, WiFi, Ethernet, or 4G/LTE. All connections are outbound only, so no reconfiguration of firewalls is needed. Easy setup of network traffic direction (Pull and/or Push) and port/IP restrictions for maintaining high security.
SECURE PERSISTENT NETWORK CONNECTIONS
You can easily set up a static tunnel connection between two separate networks using our gateways at both ends. No routing, firewall, or tunnel configuration is required. Both Master and Client devices can be installed behind corporate firewalls and can have dynamically assigned IP addresses.
REMOTE ACCESS MANAGEMENT
Digital ports of the hardware models allow operators to control remote access (e.g., via a physical switch) and detect remote access sessions (e.g., via a light tower); similarly, the software version can be controlled via a local Web API.
SEAMLESSLY COLLECT MACHINE DATA
Collect data from your machines using the equipment’s native protocols (e.g., OPC UA, Modbus TCP, Siemens S7, Ethernet/IP, MQTT, etc.). Send the raw data for further analysis and processing to your chosen cloud solution, such as Microsoft Azure IoT Hub, Amazon AWS IoT Core, Software AG Cumulocity IoT, Aveva Insight, etc.
CONTINUOUS STORE-AND-FORWARD DATABASE
Collected data is cached in the gateway to minimize data loss in case of unstable connection or power outage. The integrated Flash memory extends the RAM-based store-and-forward database, and the offline period can be further expanded by inserting an SD Flash card.
OPENING A WORLD OF OPPORTUNITIES
Integrate Secomea with your existing tools
Through our robust API connections, Secomea fosters interoperability with the systems you already use, empowering you to harness the full potential of your technology stack.
Frequently asked questions
Installation and configuration
How do I configure a Secomea gateway?
You can choose your preferred method of configuration to easily and quickly install your gateway remotely or locally.
The most popular configuration method includes creating a USB configuration on your Secomea server and inserting the USB stick into the gateway’s USB port.
The gateway will then automatically restart and connect to your server to proceed with more advanced configuration and user access management.
Learn more here: https://kb.secomea.com/docs/getting-started-with-your-sitemanager
How many devices can I connect one gateway to?
The number of devices you can connect to a single gateway varies depending on the model you choose to implement. With our hardware version, you only need one single gateway to connect up to 100 devices of all types and brands of industrial equipment via Ethernet, serial connection, or USB ports.
Operation and usability
As an admin, how do I manage user access to machines connected to a Secomea gateway?
You can do it from your Secomea server, where you can enjoy intuitive drag-and-drop user management and advanced features, such as advanced grouping for bulk management of access rights and privileged access management with hierarchy-based user roles.
Moreover, Secomea integrates with the IAM solution you already use for secure authentication via SSO (Azure AD, Okta, etc.).
As a user, how do I access a machine connected to a Secomea gateway?
You can access machines remotely directly from your browser; there is no need to install any plugins or applications.
You simply need to use the Secomea Access Client portal, where you can view all the machines you are authorized to access and be provided with access to machines (scheduled, on-demand, or upon your request).
It takes just a single click to establish a secure remote connection to a machine, allowing you to begin your remote service task immediately with your preferred protocol (RDP, VNC, SSH, or Telnet).
It will be no different than plugging into the machine directly, with no extra configuration on your computer.
Can I disable remote access to a machine connected to a gateway?
Yes, you can use a physical switch on the hardware models to disable remote access sessions; you can also detect remote access sessions via a light tower. Similarly, the software version can be controlled via a local Web API.
How does Secomea protect against MitM attacks?
Each Secomea’s M2M server has a unique TLS certificate/key to which a Secomea’s gateway binds the first time they connect – aka “Trust-on-first-use” (ToFu) – and against which any subsequent connections are verified.
To change the server the gateway trusts, one must manually reconfigure the M2M server settings in the gateway.
An attacker cannot do this through interception alone.
By requiring manual reconfiguration for any changes, we prevents unauthorized redirections.
Technical specifications
Which protocols do Secomea's gateways support for remote access?
Our gateways support any industrial Ethernet UDP/TCP device at Layer3 and even Layer2.
You can connect all types of industrial equipment via Ethernet, serial connection, or USB ports using the equipment’s native protocols (e.g., Modbus, Profinet, Ethernet/IP, etc.).
It also supports most USB and serial RS-232 devices—if not directly, via appropriate USB adapters, such as MPI and RS-485.
Which protocols do Secomea's gateways support for data collection?
Our gateway supports all the major industrial protocols for data collection, such as OPC UA, Modbus TCP, Siemens S7, Ethernet/IP, MQTT, etc.
To which cloud services can I send the data collected?
You can send the raw machine data collected for further analysis and processing to your chosen cloud solution, such as Microsoft Azure IoT Hub, Amazon AWS IoT Core, Software AG Cumulocity IoT, Aveva Insight, etc.
Is Secomea IEC 62443-certified?
Our systems periodically undergo third-party security audits and assessments. Through this significant investment, we ensure the most advanced protection for our customers and demonstrate compliance with international industry standards and best practices.
Secomea is certified under IEC 62443-4-1 standard, which specifies the process requirements for the secure development of products used in IACS.
This certification confirms that Secomea develops and maintains secure products following a secure development lifecycle (SDL), including a secure-by-design development methodology, secure implementation, patch management, and product end-of-life.
Moreover, the Secomea solution complies with IEC 62443-4-2 and IEC 62443-3-3 standards.
Get in touch
Get a personalized quote
Find out how Secomea’s solutions can fit your budget and maximize your ROI.
Team up with our Success team
We support every step of your journey beyond the initial implementation.