Understand the exposure.
Review missing patches, installed software, and vulnerability context across your environment.
BUILT FOR OPERATIONAL TECHNOLOGY
Agentless patching.
Operational
confidence.
REPLIL IPM brings agentless patch management to Windows, Linux, applications, and supported network assets. Combine vendor qualification, IDS and vulnerability insights, and controlled deployment across IT and OT.
IPMREPLIL
✓
VENDOR VALIDATIONConfidence before deployment
PATCH VISIBILITYKnow where you stand
Assess → Validate → Distribute → Monitor
ENGINEERED FOR
CRITICAL ENVIRONMENTSOil & GasPower & UtilitiesWater TreatmentManufacturing
CRITICAL ENVIRONMENTSOil & GasPower & UtilitiesWater TreatmentManufacturing
THE FULL REPLIL OVERVIEW
See the REPLIL portfolio in action.
Explore the products, industrial use cases and connected workflows that bring patching, validation, vendor content, controlled access and operational visibility together.
5 minutes 24 seconds · 1080p / 60 fps · English subtitles
START WITH THE OUTCOME
Find a solution
by use case.
OT Patch ManagementManage patch risk around industrial operations.↗IT & Unified Patch ManagementCoordinate operating-system and application updates.↗QPL & Firmware AcquisitionAcquire vendor content once. Distribute it with control.↗Air-Gapped & Isolated PatchingBring patch workflows to isolated systems.↗Secure Remote AccessControl who connects, when, and with what permissions.↗Remote Endpoint SupportTroubleshoot endpoints through a private, approved support network.↗MFA & Network AAAStrengthen authentication for Windows and network access.↗OT Log ManagementCollect, retain, and investigate industrial events.↗OT Password Vault & RotationProtect credentials and control how they are used.↗
View all capabilities, including endpoint readiness and virtual infrastructure ↗THE REPLIL PORTFOLIO
Three flagship products.
One industrial focus.
Manage patches with IPM. Validate change with OPS.
Automate vendor content with Private Repository.
Connect access, identity, and visibility around them.
FLAGSHIP PRODUCT↗
REPLIL
IPM
Industrial Patch Manager
Explore capabilitiesFLAGSHIP PRODUCT↗
REPLIL
Private Repository
Vendor Content Automation
Explore capabilitiesFLAGSHIP PRODUCT↗
REPLIL
OPS
OT Patch Sandbox
Explore capabilitiesCENTRAL VISIBILITY↗
REPLIL
CMC
Central Management Console
Explore capabilitiesCONTROLLED ACCESS↗
REPLIL
SRA
Secure Remote Access
Explore capabilitiesREMOTE ENDPOINT SUPPORT↗
REPLIL
Remote Support
Private Endpoint Troubleshooting
Explore capabilitiesIDENTITY & AUTHENTICATION↗
REPLIL
MFA
Multi-Factor Authentication
Explore capabilitiesEVENT VISIBILITY↗
REPLIL
Cyber RADAR
OT Log Management
Explore capabilitiesOT PASSWORD SECURITY↗
REPLIL
Password Vault
OT Credential Protection & Rotation
Explore capabilitiesISOLATED NETWORK ACCESS↗
REPLIL
PROXY
IPM Patch Management Proxy
Explore capabilitiesSTANDALONE SYSTEMS↗
REPLIL
CONTROL EDGE
Portable Patch Management
Explore capabilitiesTHE IPM APPROACH
A deliberate path
from patch to production.
Build confidence first.
Use vendor qualification and REPLIL OPS sandbox testing to assess application compatibility and patch impact before deployment.
Work with your network.
Plan distribution around connected, isolated, and unidirectional environments.
Keep the picture current.
Review patch status and communicate posture through dashboards and reports.
PRODUCT CAPABILITIES
Get into
the details.
Each product has a specific role.
Choose one to explore its capabilities.
Industrial Patch Manager
Agentless patch management across IT and OT.
Manage Windows, Linux, applications, and supported network assets with agentless patch workflows. Combine vendor qualification, IDS and vulnerability insights, and endpoint readiness to prioritize and control deployment across IT and OT.
Level 3.5 REPLIL Upstream Server→REPLIL IPM→Approved OT / IT endpoints
Qualification, readiness, and deployment control
IPM can also operate in upstream roles. Placement and allowed access depend on the site design.Agentless patch management
Scan, inventory, deploy patches, remediate, and report from the central IPM console without installing an endpoint agent where supported. Agent-based operations are also available for supported deployment scenarios.
Windows, Linux, applications, and network assets
Manage operating-system and application updates alongside supported network-device inventory, firmware workflows, and vendor qualification. Coverage and deployment methods depend on the asset and vendor.
IDS and vulnerability integrations
Correlate Nozomi Networks IDS insights and Tenable vulnerability data with asset inventory, CVEs, and applicable patches to inform remediation priorities.
Vendor-validated patch management
Correlate automation-vendor patch information with your industrial environment. Review missing and installed patches across multiple vendors and operating systems.
Distribution for isolated environments
Support patch distribution across multiple sites, including environments using external media, data diodes, and unidirectional gateways.
Vulnerability and baseline visibility
Map identified vulnerabilities to operating systems, applications, and patches. Identify differences in installed software and configuration baselines.
Reporting and operational context
Use live compliance dashboards, a dashboard designer, detailed scan and deployment reports, and exports to communicate operational status.
Endpoint readiness and performance
Review servicing health, pending reboot state, recovery posture, CPU, memory, storage, and mapped infrastructure before patching. Readiness evidence informs go, review, or block decisions.
Virtual infrastructure workflows
Discover and manage virtual assets, work with vCenter and ESXi inventory, and support VM templates, offline VMs, and pre-patch snapshots within the supported deployment scope.
Controlled remediation and recovery
Schedule scans and deployments, group patches by criticality, apply approval workflows, monitor execution, and use supported patch rollback options.
Central management through CMC
Manage REPLIL IPM deployments through REPLIL Central Management Console, with cross-site posture and operational reporting.
Qualification with clear boundaries
QPL correlation depends on the coverage and currency of vendor or customer qualification data. It supports patch decisions; it does not certify every SCADA application and controller firmware combination.
Vendor Content Automation
One controlled source for vendor content.
Connect approved vendor support portals and automate acquisition of QPLs, firmware, special patches, and important support content. Serve as the central Private Content Server for facility-wide use, including local and isolated systems.
Approved vendor support portals→REPLIL Private Repository→Upstream / IPM / offline package
Authenticated acquisition and controlled distribution
Vendor credentials, entitlements, available APIs, and MFA workflows determine acquisition scope.Multivendor portal acquisition
Acquire content from supported vendor portals using approved credentials and available vendor APIs or acquisition workflows.
Scheduled content synchronization
Automate scheduled synchronization and vendor-content requests to keep the central repository current.
QPL, firmware, and support content
Organize qualified patch lists, firmware, special patches, and other important vendor data in a controlled central catalog.
Metadata and integrity validation
Validate acquired content with metadata, checksums, and hashes before controlled distribution.
Facility-wide distribution
Provide content to REPLIL Upstream Servers for approved IT-to-OT distribution, including data-diode communications between enterprise and OT upstream instances and offline transfer for isolated environments.
Vendor authentication and audit
Use vendor-specific authentication, including MFA where supported, approved account entitlements, and an audit trail. Portal access and automation availability vary by vendor and account.
OT Patch Sandbox
Test the patch. Understand the impact.
A dedicated OT patch sandbox for automated testing and impact analysis before production deployment. Validate patches on isolated virtual or physical replicas, test application behavior, and examine changes to critical services, registry settings, and performance.
Selected patches & test replicas→REPLIL OPS→Validation evidence for IPM
Test, observe, and review before production
The sandbox is a separate test environment. It is not inline with live process control.Isolated patch testing
Automate patch testing in a separate sandbox environment before planning production deployment.
Application test cases
Build validation cases for desktop and web applications to check connectivity and application behavior after patching.
Service and registry monitoring
Observe changes to critical services and registry settings during patch validation.
Test analytics and reporting
Review test results, analytical dashboards, and customized reports to inform patch approval decisions.
Central Management Console
Central management for REPLIL IPM.
Centrally manage REPLIL IPM deployments and bring patch posture, identified vulnerabilities, and operational evidence from distributed industrial environments into one console.
Site IPM deployments→REPLIL CMC→Central operations / SOC
Manage IPM; consolidate posture and reporting
CMC supports data-diode communications. Direct or unidirectional paths follow the approved cross-zone design.Diode-compatible communications
Support communications through approved data-diode and unidirectional paths for central collection across isolated facilities.
IPM management
Manage REPLIL IPM deployments centrally. CMC management currently applies to IPM.
Cross-site patch posture
Review missing, installed, and required patches across isolated and distributed facilities from a central console.
IPM deployment health
Monitor Industrial Patch Manager deployments alongside patch posture and identified vulnerabilities.
Log repository and forwarding
Centralize WEF and SYSLOG events and forward logs to one or more destinations for SOC and SIEM visibility.
Dashboards, queries, and reports
Create customized dashboards and reports and investigate relevant data with advanced queries.
Secure Remote Access
Remote access with operational oversight.
A dedicated remote-access workspace for operational technology, with its own authentication, authorization, and session administration.
Authorized users→REPLIL SRA→Approved remote asset session
Approved, recorded, time-bound sessions
Session access traverses explicitly allowed conduits. This does not create unrestricted IT-to-OT routing.Multiple access protocols
Connect to secure assets using RDP, HTTP, WinRM, SSH, Telnet, and other supported protocols from a controlled access workspace.
Approval-based, time-bound access
Require approval for remote sessions and limit access to an authorized time window.
View-only and dual-join sessions
Provide view-only access when control is not required, or let authorized operators join a session together.
Recorded sessions and audit trails
Keep session recordings, keystroke auditing, and activity trails to support review and accountability.
Controlled file transfer
Move permitted files through central quarantine, antivirus scanning, and configured approval before delivery to the endpoint.
SRA Proxy for supervisory zones
Extend approved REPLIL SRA sessions through an SRA Proxy in the Level 2 zone to supervisory assets, alongside permitted access to Level 3 assets.
Session administration
Give authorized operators the tools to oversee, join, control, and disconnect active sessions.
Private Endpoint Troubleshooting
Resolve endpoint issues with controlled remote support.
Remotely troubleshoot and manage endpoints through your private support network with approval-based access. Control viewing, clipboard use, and file operations. Choose a persistent agent, an on-demand agent without installation, or on-demand support through REPLIL IPM without an endpoint agent.
Approved support operator→REPLIL Remote Support→Endpoint / workstation / server
Private, approval-based endpoint troubleshooting
Use persistent agents, no-install on-demand agents, or IPM on-demand support without an endpoint agent. Placement follows the permitted support-network design.Private support network
Operate remote support within your private network and control which support users can access each endpoint.
Approval-based endpoint access
Require approval before a remote support connection is established and keep endpoint troubleshooting under authorized control.
View-only and session controls
Provide view-only access when intervention is unnecessary and control permitted remote interaction during support.
Clipboard and file controls
Control clipboard use and file operations according to the permissions approved for the support session.
Persistent or on-demand agents
Use a persistent support agent where ongoing availability is required, or an on-demand agent that runs without installation.
On-demand support through IPM
Launch on-demand endpoint support through REPLIL IPM without requiring an endpoint agent.
Multi-Factor Authentication
Add verification where access begins.
Bring authentication, authorization, and accounting together for Windows and network assets, with Active Directory integration and multiple verification methods.
AD / local identities→REPLIL MFA→Windows or network access decision
Verification, authorization, and accounting
This reference deployment applies MFA at Level 3.5 and below. Levels 4-5 are outside REPLIL MFA coverage in this design.AAA for network assets
Centralize authentication, authorization, and accounting with RADIUS, TACACS+, and TACACS support.
Windows and network MFA
Apply additional verification to Windows sign-in and supported network-asset access workflows.
Active Directory integration
Work with AD identities and manage authentication policies around users and groups.
Hardware and software authentication
Support hardware and software authentication options alongside one-time passwords.
Pattern and email authentication
Offer pattern-based and email-based authentication methods within the configured access policy.
Central administration and auditing
Review authentication activity, account policy, and network accounting from the management workspace.
OT Log Management
Turn industrial events into a clearer picture.
Collect operating-system and network logs, detect critical activity, and retain events locally—with agentless and agent-based options and unlimited EPS support.
OS & network log sources→REPLIL Cyber RADAR→Data diode → enterprise SIEM
Collect, retain, detect, and forward
Cyber RADAR forwards logs through the data diode to the enterprise SIEM, without an Upstream Server in the log path.Agentless and agent-based collection
Collect OS and network-device logs using the method that fits your environment.
Unlimited EPS support
Manage event collection without an events-per-second licensing limit.
Local storage and retention
Keep logs locally and manage retention around your operational and investigation requirements.
Critical-event detection
Identify events such as failed logins and configuration changes for security and operations review.
Custom dashboards and reporting
Build dashboards and reports around the events and trends relevant to your facilities.
Flexible log forwarding
Forward events using supported formats and transports including Syslog, TLS, CEF, and LEEF.
OT Credential Protection & Rotation
Protect every credential. Control every retrieval.
An OT-focused credential vault for protected storage, user- and asset-scoped access, and controlled password rotation. Combine AES-256-GCM envelope encryption, TPM 2.0-backed key protection, and signed APIs with IPM credential-retrieval and rotation workflows.
Authorized IPM user + asset context→REPLIL Password Vault→Scoped credential retrieval / verified rotation
Authorize, retrieve, rotate, and audit
TPM 2.0 key protection follows the supported Linux deployment. IPM integration is version-dependent; target rotation requires an accepted connector and approved account scope.Private ownership and scoped access
Authorize credential access by user, credential, and asset context. Separate metadata viewing, secret retrieval, and rotation permissions; ordinary platform administration does not automatically reveal user secrets.
AES-256-GCM envelope encryption
Encrypt secret values, sensitive metadata, MFA seeds, and recoverable API signing keys using per-value data keys. Protect them with separately supplied key-encryption material and authenticated owner, record, version, and purpose context.
TPM 2.0-backed key protection
Support Linux TPM 2.0-backed protection of bootstrap key material through systemd encrypted credentials. Required TPM mode fails closed when the required protection or key material is unavailable.
Independent encrypted recovery
Maintain an independently encrypted recovery wrapping of vault key material for approved restoration onto replacement infrastructure. Recovery custody is separate from ordinary account sign-in.
Per-user signed API access
Use independently revocable, expiring access keys with credential scopes. RFC 9421 signed requests bind request context and body integrity, with timestamp and nonce replay checks.
Controlled target password rotation
Run supported manual and scheduled rotation workflows with encrypted pending values, account coordination, verification before promotion, and reconciliation after uncertain outcomes. Connector acceptance depends on the target platform.
Deep IPM workflow integration
Use IPM user and asset context for scoped credential retrieval and rotation through signed APIs and stable credential references. Integration availability depends on the deployed IPM and vault versions.
Strong vault sign-in and auditing
Protect vault login passwords with PBKDF2-HMAC-SHA512 hashing, require TOTP MFA, and retain access and rotation audit records without logging secret values.
IPM Patch Management Proxy
Reach isolated zones. Keep control central.
Extend central REPLIL IPM patch management into non-routed, isolated networks through a controlled entry point.
Central REPLIL IPM→REPLIL PROXY→Assets inside an isolated zone
Single entry point with protocol break
The approved path terminates at PROXY. Do not interpret it as general routing between zones.Agentless patch management
Manage patching within isolated zones without installing an agent on each managed asset.
Built for non-routed networks
Support patch-management operations in isolated network zones that do not have a routed path to the central IPM instance.
A single controlled entry point
Provide secure access from central IPM through one entry point into the target zone.
Protocol break
Use a protocol-break design between central IPM access and operations inside the isolated zone.
Portable Patch Management
Take patch management to the edge.
A portable, agentless patch-management tool for standalone isolated systems, with inventory correlation back to central REPLIL IPM.
Approved offline patch content→REPLIL CONTROL EDGE→Standalone asset / IPM inventory
Connect locally, update, and correlate inventory
Portable use is shown with a supervised asset. It is not a permanently open inter-zone connection.Portable patch operations
Bring patch-management capabilities to standalone systems using a portable tool.
Agentless management
Carry out supported patch-management operations without an installed agent on each managed system.
Standalone isolated systems
Manage systems that sit outside the normal connected patch-management workflow.
Update on connection
Update standalone systems as they are connected to the tool.
Central IPM inventory correlation
Correlate collected inventory centrally into REPLIL IPM for a wider view of the environment.
Dashboards and reports
Review activity and inventory through custom dashboards and reporting.
INTERACTIVE REFERENCE ARCHITECTURE
See where each
REPLIL product fits.
Choose a workflow, or select any component to see all its connections across the Purdue model.
CONTENT SOURCESOutside the plant network
LEVELS 4–5Enterprise & central services
DATA DIODEOne-way boundary conduits
LEVEL 3.5Industrial DMZ / controlled boundary
LEVEL 3Site operations & isolated testing
LEVEL 2 / CELL ZONESupervisory & standalone systems
LEVEL 1Basic control
LEVEL 0Physical process
ContentAccess / identityPosture / logsCMC management / IPM optionalMFA badge: supported access, configured per deploymentDiscovery / trafficVault / rotationOffline / local exchange
Synchronization requests and monitoring arrows point upstream, from lower to higher Purdue levels. The separate Enterprise-to-OT content-delivery path uses HTTPS when connected or manual external-media import; it does not represent HTTPS passing through a one-way diode. CMC management paths are shown separately; the direct IPM management path is optional. Choose the content transfer option to compare HTTPS delivery with manual external-media updates. Illustrative placement, not a universal deployment blueprint. Security zones, approved conduits, protocol choices, and offline-transfer procedures depend on the site design. Level 0–1 context does not imply direct automated PLC patching or controller certification. Purdue layer reference ↗
FROM THE REPLIL BLOG
Ideas for a more
resilient industrial world.
LET’S TALK ABOUT YOUR OT ENVIRONMENT
Keep operations moving.
Move security forward.
Explore REPLIL IPM and the products that fit your infrastructure.
Talk through your requirements with our team.