Single sign-on
Microsoft Entra ID, Okta, Google Workspace or any OpenID Connect provider, with domains verified by DNS.
MAAPS Edge
Secure remote access for every machine on the floor.
A compact edge device that sits next to your PLCs and HMIs. Engineers reach them from the browser, plant data streams to MQTT, and nothing on your network is opened to the internet.
Remote access only when you allow it. Data collection around the clock.
01 / How it works
Set up on site. Managed from anywhere.
Plug it into the plant network, activate it with a licence key, and add your machines.
PlantPLCs, HMIs, cameras
Web pages, VNC screens, Telnet and OPC UA
On siteMAAPS Edge
Up to 50 devices, behind its own firewall
TransportOutbound only
It calls out. No inbound port is opened.
CloudMAAPS Edge Admin
Licences, sessions, commands and updates
AnywhereYour team
Screens and web pages in the browser
- Step 01
Connect
Wired Ethernet or Wi-Fi, with automatic switch-over between them.
- Step 02
Activate
Type the licence key on the screen. The box checks in with MAAPS Edge Admin and receives a signed licence.
- Step 03
Add your machines
Pick a device found on the network or type its address, then choose its make and device type. Ports fill themselves in.
- Step 04
Work from anywhere
Your team opens screens and web pages from the browser; plant data flows to your broker.
02 / Remote access
Open the machine, not the network.
Remote sessions exist only while someone is connected, and only after every check has passed.
01
In the browser
HMI web pages, VNC screens and Telnet terminals open in a browser tab. Nothing to install on the engineer's laptop.
02
View only, for real
Operators can watch without touching. The box itself drops keyboard and mouse input and blocks changes on web pages.
03
Asked, approved, on time
Every session carries a signed grant from MAAPS Edge Admin. The box checks its own remote access hours and can ask someone on site to tap Allow.
04
Ends by itself
Sessions close when idle, when their time is up, or the moment someone ends them, from Edge Admin or the box.
05
Inside MAAPS CMMS
Show a machine's HMI page right next to its work orders.
GrantSigned by MAAPS Edge Admin✓HoursInside the box's remote access hours✓On siteAllowed on the box's own screen✓ModeView only, enforced on the boxOnIdleCloses by itself when idle15 min
5sessions at most, per box and per person
03 / Data collection
PLC data to MQTT, even through an outage.
MAAPS Edge reads values from your PLCs over OPC UA and delivers them to your MQTT broker or a REST endpoint.
Store and forward
When the network drops, values queue on disk and go out in order once it's back.
See every value
Live status, the last hour, and per-value details: readings, quality, sent and waiting.
Writes stay off
MAAPS can read control points; writing to a PLC stays off until you switch it on.
Keep your topics
Moving from another edge device? Keep the Edge ID your MQTT topics already use.
04 / Security
Closed by default. Signed end to end.
Built for plant networks that must never be exposed to the internet.
01
No open ports
The box only ever calls out. No inbound port is opened on your plant network, and its own firewall blocks everything else.
02
Never a router
MAAPS Edge never routes traffic between the internet and your plant. Every session is one approved connection to one device.
03
Signed everything
Licences, software updates, remote commands and session grants are all signed with Ed25519. The signing keys never touch a box.
04
You decide who and when
Single sign-on, MFA, roles on folders, Manager approval and remote access hours. Ask on screen puts the final yes in the hands of someone on site.
05
Commands with a safety catch
Every remote command is checked on the box for signature, device, expiry and replay. Turn whole categories off on the box; a network change that cuts it off undoes itself in about two minutes.
06
Updates that roll themselves back
Signed updates roll out in stages. A box that fails its health check restores the previous version on its own, and the rollout stops.
07
Revoke in minutes
Each box renews its licence every few minutes. Suspend or revoke a lost or retired box in Edge Admin and it stops.
08
A record of everything
Every change in MAAPS Edge Admin is audited, and the box keeps its own trail of who changed what on site.
05 / Supported devices
70+ makes. One honest list.
Pick the machine's make, or MAAPS Edge if none fits. MAAPS Edge reaches every make through what the device itself offers: its web page, a VNC server, Telnet or OPC UA.
| Device type | What you get | Typical devices |
|---|---|---|
| Web access (WWW) | The device's own web page in the browser | HMI panels, PLC web servers, IP cameras, drives |
| Remote Desktop (VNC) | The live screen, with keyboard and mouse | HMI panels, operator PCs with a VNC server |
| View-only VNC | The live screen, look but don't touch (enforced on the box) | Screens operators and managers watch |
| Telnet | A terminal in the browser (Operate access only) | Devices with a Telnet console |
| Data collection (OPC UA) | Values read on a schedule and sent to MQTT or REST | PLCs with an OPC UA server |
Ready-made forAxis Communications IP cameras · COPA-DATA zenon Web Client and zenon VNC · Grundfos VNC Server
71 makes + MAAPS Edge · as listed on the box
- MAAPS Edge
- Allen-Bradley
- ABB
- Axis Communications
- B&R
- Beckhoff
- Beijer
- Bihl+Wiedemann
- Bosch Rexroth
- BRControls
- Cognex
- Comau Robotics
- Control Techniques
- COPA-DATA
- Crouzet
- Danfoss
- Delta Electronics
- Eaton Moeller
- ELAU
- ESA
- Exor
- FANUC Robotics
- Fatek Automation
- FlexEm
- GE IP
- Grundfos
- Hakko
- Hilscher
- Hirschmann
- Horner
- IDEC
- ifm electronic
- IMO
- InduSoft
- Inovance
- Invensys Wonderware
- Kawasaki Robotics
- Keyence
- Kollmorgen
- Koyo
- KUKA Robotics
- Kvaser
- Lenze
- Mitsubishi Electric
- Moxa
- Omron
- Panasonic
- Parker
- PEAK-System
- Pepperl+Fuchs
- Pilz
- Phoenix Contact
- Priva
- Pro-face
- Rockwell Automation
- RRAMAC, LLC
- Saia-Burgess
- Schneider Electric
- SEW
- Sick
- Siemens
- Stöber
- Stäubli
- Trio Motion
- TP Radio
- Unitronics
- Universal Robots
- Vacon
- VIPA
- Wago
- Weintek
- Yaskawa
Brand names are used only to identify equipment. MAAPS Edge connects to these devices through standard web, VNC, Telnet and OPC UA access; it does not carry vendor engineering software connections.
06 / MAAPS Edge Admin
Every box, one portal.
Licences, health, sessions, commands and updates for your whole fleet, in the browser.
01
Health at a glance
Each box reports its services, disk, temperature, firewall and devices. If one goes quiet, your team gets an email.
- ✓Services
- ✓Disk
- ✓Temperature
- ✓Firewall
- ✓Devices
02
Alerts your way
Email and web hooks from the box, with delays and per-person schedules.
03
Remote commands
Restart a service, fetch logs, change the network or firewall allow-list, signed and checked every time.
04
Staged updates
Canary, pilot, then the fleet, with automatic rollback on any failure.
05
Help from site
Report an issue on the box's screen and MAAPS receives it with recent logs.
07 / Teams
The right people, at the right time.
Bring your own directory and keep control of every connection.
SCIM
Your directory adds, updates and removes people by itself.
Folders and roles
Admin, Manager, Engineer, Operator and Viewer, given on a folder and inherited below it.
Approval and time windows
Require a Manager's approval to connect, and allow remote access only on set days and hours.
Questions, answered.
Do engineers need to install anything?
No. Web pages, VNC screens and Telnet open in the browser after signing in to MAAPS Edge Admin.
Does MAAPS Edge open a port on our firewall?
No. It only calls out over HTTPS. No inbound port is opened on the plant network.
Can someone connect without us knowing?
Every session needs a signed grant and can require a Manager's approval, set hours and a tap on the box's own screen. Sessions can be seen and ended in MAAPS Edge Admin, and close by themselves when idle.
Which machines does it work with?
Any device it can reach on the plant network that offers a web page, a VNC server, Telnet or OPC UA, across 70+ makes such as Siemens, Rockwell Automation, Schneider Electric, Omron and Beckhoff.
Can we program a PLC through it?
Not with the vendor's engineering software: MAAPS Edge doesn't carry those connections. It opens the device's web page or screen, and reads data over OPC UA.
Does it support RDP, VPN or Layer 2 access?
No. MAAPS Edge never routes between the internet and your plant network, by design. Each session is one approved connection to one device.
What happens if the internet drops?
Data keeps being collected and queues on disk, then goes out in order. The licence stays valid offline for up to 7 days.
How many devices can one box handle?
Up to 50 devices.
How is it updated?
With signed updates rolled out in stages from MAAPS Edge Admin. A box that fails its health check rolls back on its own.
Does it work with MAAPS CMMS?
Yes. Plant data flows over MQTT to MAAPS, and a machine's HMI page can be shown inside MAAPS CMMS.
Get started
See MAAPS Edge on your plant.
Book a demo and we'll show remote access and data collection on your own machines.