Ironloop for Ignition

Ironloop extends Ignition’s security capabilities with continuous configuration assurance and compliance verification. With Ironloop, customers maintain a centralized, standardized view of their OT infrastructure: query every Ignition Gateway’s settings at once, measure each Gateway against the Ignition Security Hardening Guide, generate a report, and understand what every configuration change means for security, compliance, and uptime.

How it Works

Ironloop reads an Ignition Gateway configuration whether exported or uploaded, pulled from the backup tools you already use, or collected through an Ironloop collector. Because nothing is installed on or executed against the Gateway, Ironloop’s reads do not alter the system’s validated or qualified state. On an air-gapped site, Ironloop can directly analyze the exported file alone, directly within the bounds of the network. Ironloop runs hosted or fully on-premises, with your data staying under your control.

Once Ironloop has the configuration, it does more than show you what changed. Ironloop gives meaning to every change, telling you what each change means for how the system was designed to run, for your team’s standards, and for the frameworks you answer to (e.g., IEC 62443-3-3, NIST 800-82, NERC CIP). This way, every remediation recommendation includes practical remediation guidance and the exact flags that must be changed to fix the issue. Ironloop automatically evaluates the configuration with every snapshot, across every Gateway in your network of sites, plants, pipelines, and substations. Your team gets a versioned and queryable history of every Ignition Gateway, PLC, switch, firewall, and OT device without maintaining it by hand.

What We Have Secured So Far

Ironloop runs Ignition Gateway workflows live in customer deployments. Today customers use Ironloop to ingest and read Ignition Gateway configurations alongside PLC, switch, and firewall configurations. Those customers can now see every change explained against the frameworks they answer to, the build standards they’ve set for their own sites, and the checks they rely on to know a system is operating as commissioned and working the way it should.

Ironloop also compares the Gateway backup against what’s actually running on the Gateway in real time. This shows you exactly what has changed before a planned downtime event, so you can make changes confidently while strengthening security and safety.

Want to See If Your Gateway Is Misconfigured?

Ironloop is read-only and works on air-gapped sites. Get a configuration baseline for your PLCs, SCADA, and OT infrastructure in a single session. Book a 30-minute demo or email us at ignition@ironloop.io.