Security & trust
Built to pass your plant IT review
The Factory Platform runs inside your plant, signs what matters, records who changed what, and ships without licence surprises. It is designed with IEC 62443 principles in mind.
On-premise, nothing outbound
- Runs on your appliance, VM or RHEL server
- No outbound internet connection required
- No telemetry by default
- Only HTTPS (port 443) exposed; TLS between browser, station and server
- Import your own certificates
People and access
- Roles checked on the server for every request
- Re-authentication for actions that change production
- Passwords hashed with Argon2; sign-in throttling against guessing
- Session cookies a script cannot read, with CSRF protection
- Personal 6-digit PIN for operators on shared kiosks, with lockout
Signed, end to end
- Inspection programs, software updates and licences are signed (Ed25519)
- Signatures are checked before anything is stored or applied
- Separate keys for programs, updates and licences
- Signing keys stay offline at Gorad; stations hold only public keys
Audit and data
- Append-only audit log of configuration changes
- Your images and results are your data
- No transfer to Gorad without your explicit consent; exports are audited
- Remote access is off by default; when used, it is approved by you, time-limited and audited
Supply chain
- Software bill of materials (SBOM, CycloneDX) per release
- Dependency vulnerability scans fail the build on high or critical findings
- Secrets scanning on every change
- Locked dependency versions and pinned base images
Licence-clean
- Every dependency, model and weight file is checked and registered
- No AGPL, SSPL or GPL code shipped
- No non-commercial or research-only model weights
- Not used: MongoDB, Redis, MinIO
Safety first
Security never weakens the line
Neither security nor licensing can pass a bad part or stop a running line.
- The inspection and PLC path runs on the station, independent of the server and the user interface
- An expired licence never stops inspection or the PLC output
- A tampered program fails its signature check and cannot go live
Plainly
What we do not claim yet
- No IEC 62443 certification or compliance claim. The design follows its principles; it has not been formally assessed.
- No third-party penetration test yet. One will be done before broad rollout, or earlier when a customer requires it.
- Data protection laws such as the GDPR or India’s DPDP Act may apply to user data in your plant. We will work through the ones that apply to you.
To report a security issue, email info@gorad.in with “Security” in the subject.
Need answers for a security questionnaire?
Send it to us. We will answer it point by point, including what is not built yet.