Version control · backup · recovery

Change management for industrial automation, with verifiable proof of compliance.

Version control, backup and recovery for PLC, HMI, SCADA, CNC and robots. Web-first, on-premise, IEC 62443.

SHA-256: audit trail verifiable offline LIVE == REPO: recovery verified via content fingerprint Siemens deep: extensible via import
ENGINEERING WS · COMPARE LAD · ACME MANUFACTURING
Proof of compliance: Digital signatures (PKCS#7) on approvals

Procedure · the full cycle

Control: Check-in / Check-out

Who changed what, and when: under full control.

  • Two checkout modes: Lock for other users or Under development (non-exclusive, first-check-in-wins)
  • Check-in required through a Change Request (IEC 62443 requirement), plus optional peer review
  • Base-version check, lock with TTL plus keepalive, checkout queue, manager force-release
  • Full version history per component (author, message, CR, type: baseline / manual / auto-backup / drift / restore / supplier)

Procedure · the full cycle

Detect: drift management

Know immediately when the controller on the plant floor is no longer the approved one.

  • CRC comparison against the approved version, with a live alert (SSE plus toast) on any divergence
  • Banner on the machine plus an auto-created Change Request for drift, going straight into the review workflow
  • Scheduled compare jobs (Server↔Backup, Previous↔Backup): alerts only on new divergences, with a deep link into compare
  • Acknowledge with a documented reason, everything audited

Procedure · the full cycle

Recover: rollback / restore

Return to a known-good state: verified, not taken on trust.

  • Restore to any version (CR-gated)
  • Batch restore to a recovery point: last-known-good / baseline / manual (drift captures excluded from targets)
  • End-to-end recovery in the controller: the job enters the queue, the agent writes to the PLC and confirms LIVE == REPO via content fingerprint (validated on simulator; on hardware at deployment)
  • One restore commit per component, independent transactions (one failure does not block the rest of the recovery)

Spec sheet

Why versionVan

Five differences versus octoplant and versiondog, shown in a live demo on real Siemens files (TIA/SimaticML).

No.SpecificationDetailMark
01 Tamper-evident audit trail (SHA-256, verifiable offline) Every action cryptographically chained. Prove compliance even on an air-gapped system. Tamper-evident
02 IEC 62443 with a linter built into version control Per-machine checklist plus a code linter that blocks non-compliant check-ins. Compliance in the flow, not a report at the end. Compliance in-flow
03 Graphical compare with a reason-for-change per difference LAD/FBD side-by-side, changes in red plus dashed line (not color alone), 3 views (Drawing / Table / Files), a documented comment per element, not just per version. Per-difference
04 Recovery verified (LIVE == REPO) Not a metadata revert: a real download confirmed via the LIVE == REPO content fingerprint. Validated on simulator; on real hardware at deployment. Verified recovery
05 Web-first plus Azure AD SSO plus on-prem air-gapped Browser access (EasyClient, no heavy client), Entra SSO with JIT provisioning, but also full on-premise deployment. Web-first, on-prem

Overview

Product pillars

01

Factory & inventory

Plant → Line → Cell → Machine hierarchy, live status per machine, KPIs, and the devices on each machine.

02

Compare

Graphical LAD / FBD compare side-by-side, 3 views (Drawing / Table / Files), Free Compare and PDF export.

03

Backup & drift

Scheduled (cron) plus manual backup, with retry and backoff, live drift detection and scheduled compare policies.

04

Suppliers (SmartImport)

Staged deliveries from contractors, automatic review against HEAD, Accept (CR-gated) / Reject with a reason, everything audited.

05

Workflow & compliance

Change Requests with transitions and a reviewer, impact analysis on standard blocks, digital signatures (PKCS#7).

06

Roles & access

7 roles plus per-action RBAC, read-only EasyClient, Azure AD / Entra SSO with JIT provisioning.

07

Multi-vendor & integration

Deep on Siemens (SimaticML / TIA), extensible via import; on-site agent (vv-agent) plus public REST API /api/v1.

08

Platform

Web-first (Next.js) plus a desktop review client (Tauri), on-premise deployment (Docker / VPS), live events (SSE).

Robotic assembly line, black and white

A robotic assembly line. versionVan keeps the PLCs, HMIs and robots behind it under version control.

See versionVan on your machines.

A live demo on real Siemens files (TIA/SimaticML): check-in, drift, recovery, audit.

DEMO ENVIRONMENT · ACME MANUFACTURING

Request a demo