Who We Serve / Manufacturing

Keep IT assets from causing the next line-down event.

Engineering laptops, HMIs, and cobot endpoints kitted to vendor-validated builds at our RTP facility — so Windows updates, driver drift, and untested patches never become the reason a line stops.

/ Operational Outcome

Zero

UNPLANNED LINE-DOWN EVENTS FROM IT

/ Proof Points

What we actually do, not what we promise.

P / 01

OT gold images

Custom OT baselines with TIA Portal, Step 7, Fanuc Ladder/Roboguide, and RSLogix pre-validated against the controller versions you actually run.

P / 02

Conservative WSUS / Intune rings

Patch rings staged behind Siemens, Fanuc, and Rockwell compatibility matrices — never auto-pushed into a production window.

P / 03

Pinned drivers

NIC, USB, and serial drivers locked to the versions your PLC and CNC programming cables expect, so a Windows update doesn't cost you a shift.

P / 04

Purdue-aware profiles

Network profiles, app allow-listing, and removable-media controls aligned to Purdue model levels — engineered, not improvised.

OPERATIONAL TECHNOLOGY

The network behind your line shouldn't be a black box.

Most manufacturers can't tell you what's actually on their plant network — which PLCs, which HMIs, which contractor laptops, which forgotten devices a vendor plugged in two years ago. That's not a security problem yet. It's a security problem waiting.

Surya's network edge ships with OT visibility built in. Every site gets the same engineered appliance, pre-configured to discover and monitor every device on the production network, with the IT/OT boundary enforced from day one.

Templated, not improvised

Every plant gets the same engineered network edge — firewalls, switches, access points, and our network appliance — configured to one standard in our facility and shipped ready to deploy.

Claroty, built in

The visibility-and-security layer is Claroty's xDome platform, pre-installed and pre-configured on the Surya appliance. Every device on the production network discovered, profiled, and monitored — without a separate procurement cycle for OT security.

One persona model, edge to endpoint

Plant operators, office staff, vendor contractors, and OT devices each get the access they need — defined once, applied identically at every site. The same model that governs your laptops governs your network.

OT visibility, IT/OT segmentation, and persona-based access — engineered together, shipped together, operated together.

/ Scenarios

From the floor, not the brochure.

Scenario / Plant FloorOT Laptops — Manufacturing

A laptop update at 2am shouldn't be able to stop your production line.

The laptops your plant engineers use to run the floor are one bad update away from a line stoppage that costs you real money per hour. We keep those machines off the update cycles that break them — imaging to vendor-validated baselines, locking driver and firmware versions, and running a conservative WSUS ring aligned to Siemens TIA Portal, Fanuc CNC/Roboguide, and Rockwell FactoryTalk compatibility matrices.

  • +Custom OT gold images: TIA Portal, Step 7, Fanuc Ladder/Roboguide, RSLogix
  • +Conservative WSUS / Intune rings validated against vendor support matrices
  • +Pinned NIC, USB, and serial drivers for PLC and CNC programming cables
  • +Purdue-aware network profiles, app allow-listing, and removable-media controls

Scenario / RoboticsCobot Provisioning

The robot arrives on the floor already safety-certified and ready to run.

When a collaborative robot ships to your plant unconfigured, your team loses days getting it safe and production-ready — with a safety assessor waiting. We configure and certify it before it ever reaches the cell: teach pendants, vision controllers, and edge PCs for Universal Robots, FANUC CRX, ABB GoFa, Doosan, and Techman cobots, pinned to URCaps, Robotiq, OnRobot, and Cognex driver versions, and locked to the cobot's certified safety configuration.

  • +Validated builds for UR, FANUC CRX, ABB GoFa, Doosan, and Techman cobots
  • +Pinned URCaps, Robotiq, OnRobot, and Cognex vision driver versions
  • +Firmware and safety-config locked to ISO 10218 / TS 15066 assessment
  • +Commissioning packet: checksums, network plan, and rollback image

/ Contact

Tour the facility. Get a quote.

Tell us about your fleet — number of devices, vertical, and HRIS — and our RTP team will be in touch within one business day.

Facility

Surya IT Logistics
Research Triangle Park, NC 27703

Verticals

Healthcare · Manufacturing