/ Surya Fabric
Keep every location operating securely and at full speed, with network capacity and resilience that support your growth.
A complete network system, provided by Surya.
Surya Fabric provides the complete network system for your sites. We supply the equipment, configure and install it to a defined standard, test it before operation, and maintain its performance, security and recovery.
One defined system for the agreed sites, from equipment through ongoing operation: Surya-supplied edge, switching, Wi-Fi, segmentation and connectivity on one released profile, installed and tested before the site runs on it, then maintained with a tested recovery procedure.
/ Two outcomes
Resilience outcome
Keep locations connected and make network recovery predictable.
Security outcome
Control which systems can connect and limit the spread of threats across the site.
What Surya operates to deliver them.
Surya supplies and operates the supported site-network system, including equipment, configuration, permitted connections, and recovery procedures.
/ What can be tested or evidenced
- Network inventory and approved configuration.
- Tests of permitted and prohibited connections.
- Supported recovery and included failover test results.
Enforcement claims apply to the network Surya operates. A visibility-only scope does not provide segmentation enforcement.
Automated reporting to Vanta
Fabric supports automated reporting to Vanta for its agreed site-network scope.
Surya can arrange independent auditor relationships as part of your product scope when your requirements call for them.
The evidence listed illustrates the product's contribution; the configured reporting scope determines which records are transmitted automatically. Vanta licensing, connection scope, reporting details and any third-party assessment fees are confirmed in the commercial scope.
Compliance reporting and auditor coordination →/ Industry compliance support
Manufacturing and CMMC support →
Separation of business and operational systems, with supported OT visibility and controlled access.
Healthcare and HIPAA support →
Controlled connections among business, guest, and supported clinical or device networks.
Each link explains this product's contribution. No single product independently covers every requirement.
/ What the element covers
- Surya-supplied edge, switching and wireless equipment on the standard configuration
- Installation and pre-operation testing of the supplied system
- Segmentation and allowed paths from the shared specification
- Connectivity, with a tested alternate path where the selected profile includes one
- Network inventory, firmware lifecycle and configuration protection
- Replacement of a supported component without the original designer
One defined system, from equipment through ongoing operation.
You buy one engineered system rather than assembling a network from parts and providers. Surya supplies the edge, switching and wireless equipment on the standard configuration, sets the segmentation and the paths allowed across it from the shared specification, installs the system and tests it before your site operates on it.
From there the same system is maintained: firmware lifecycle, inventory and configuration protection are operated continuously, and a supported component can be replaced without the original designer. Equipment ownership and commercial terms are set out in your written proposal and agreement.
One profile per site, not one design per site.
Each supported site is built from Surya's released network profiles. Configuration, maintenance and recovery follow the same operating standard, with changes managed through the product's release process.
The supported scope stays bounded. Site readiness, structured cabling, building power, carrier accounts and carrier repair, and production machinery keep their existing owners.
Recovery is a tested procedure.
The approved configuration can be restored, and losing each included path produces a declared result. A single connection is never sold as redundant, and carrier repair, building power and production machinery remain outside Surya's control.
OT and CPS security sits inside Fabric.
OT and CPS security is part of Surya Fabric. Where Surya does not operate the network, it is available as a visibility scope only, without enforcement.
Enforcing separation requires Surya to operate the network. On a network Surya does not operate, the OT and CPS scope is sensors, asset inventory, vulnerability matching, anomaly detection and the evidence that comes out of it, with the coverage state reported rather than assumed.
/ Deployment
Your first deployment.
Deployment starts with a defined scope, a single site or a single group of equipment, rather than the whole estate. The relationship starts with Surya Standby, and Endpoint or Fabric is deployed to the released profile when that deeper scope is purchased, at the outset or later. Where Surya Fabric is purchased, Surya provides the network system itself: the equipment, its standard configuration, installation and testing.
Starting Surya Fabric means Surya provides the network system for the agreed sites rather than taking over what is installed there today. Surya supplies the equipment and its standard configuration, installs and tests it before the site operates on it, and then maintains its performance, security and recovery. Site readiness, structured cabling, building power, carrier accounts and repair, and production machinery keep their existing owners.
/ 01
Choose the scope
The products, the equipment classes, one site or one device group. The scope is written down before anything is installed.
/ 02
Compatibility review
For Standby, the configurations Surya will capture and reproduce, the physical placement and the approvals the replacement workflow needs. For Endpoint, your environment is checked against the released profile, including identity and platform dependencies. For Fabric, the sites, connectivity, cabling and site readiness the Surya-supplied network system needs are checked.
/ 03
Written prerequisites
Anything that must change first is stated in writing, together with the approvals your organization needs to give.
/ 04
Installation
Surya installs the agreed physical arrangement and the prepared replacements, deploys and tests the Surya-supplied network system where Fabric is purchased, and configures any purchased Endpoint scope to the released standard.
/ 05
Acceptance tests
Each product is accepted against its own tests, so the result is inspectable rather than asserted.
/ 06
Ongoing operation
Surya operates the accepted scope, and faults inside it are Surya's to resolve.
What changes in your environment
- Surya Standby reproduces the configurations you already run; it does not require your estate to be rebuilt first, and keeping your existing production setup is not a barrier to it.
- Standby prepares replacements for your existing supported equipment and configurations. Endpoint can retain devices where its released profile permits. Fabric supplies, installs and tests the network system for the agreed sites.
- Where Endpoint is purchased, configurations inside that purchased scope are brought to the released profile, which can change how some settings are managed today, and replacement preparation then follows that baseline. Where Fabric is purchased, the supported site network runs on the Surya-supplied system and its standard configuration. Equipment and identity models outside the purchased scope are unaffected.
- Approvals from an accountable owner are required for consequential changes.
- Providers responsible for adjacent systems, applications or machinery remain responsible for them, and Standby on its own leaves ongoing tenant, endpoint and network administration where it is today.
An illustrative first deployment covers the supported network at one site: the Surya-supplied network equipment and its standard configuration, the agreed connections between systems, configuration recovery, and tests of permitted and blocked access before the site operates on it. Site prerequisites such as readiness, structured cabling and power are identified before installation.
Each product has its own prerequisites. Standby does not require Endpoint or Fabric, and buying Fabric does not automatically require Endpoint. Any dependencies that extend beyond the selected site are identified during qualification.
What it depends on
Site readiness, structured cabling, declared power dependencies, and the customer's carrier accounts.
What it excludes
The supported site-network scope written into your agreement, not every system that connects to it. A single connection is not sold as redundant. Site readiness, structured cabling, building power, carrier accounts and carrier repair, and production machinery stay outside Surya's control. Equipment ownership and commercial terms are set out in the written proposal and agreement.
How it is accepted
Inventory matches the installation; required business paths succeed; prohibited cross-segment access is denied; the approved configuration can be restored; losing each included path produces the declared result.