Kepware: Industrial connectivity platform

From shop-floor protocols to enterprise data streams

See services & pricingBook a consultation
Kepware

Kepware is Velotic's industrial connectivity platform that aggregates data from 150+ industrial communication protocols - PLCs, robots, SCADA systems - into a unified OPC UA interface for IIoT and digital transformation / custom software applications.

Available as Kepware Server (Windows), Kepware Edge (Linux/Docker) and managed centrally via Kepware+ Manager. TT PSC is a Velotic reseller and system integrator delivering licensing and implementation across Europe.

150+ protocol drivers
15+ years with Kepware
50+ engineers

Who owns Kepware?

Kepware was founded in Portland, Maine in 1995 and acquired by PTC in January 2016 for approximately $100 million. In 2026, PTC divested its industrial connectivity portfolio to TPG Capital, forming Velotic, an independent industrial software company. It remains the same product; Velotic continues active development.

TT PSC Blog: TPG Acquisition

What is Kepware?

Kepware is industrial connectivity middleware - not a SCADA, not an HMI, not an analytics platform. It solves one problem: your PLCs, robots, meters and sensors all speak different proprietary protocols, and every other enterprise system needs that data.

Engineer interacting with a holographic augmented-reality interface in a smart factory with industrial robotic arms

Kepware is the layer that translates all of them into a single, standardised interface - and encapsulates the entire diversity of industrial communication protocols in one tool. That data flow is secured by design: an encrypted tunnel with user-based access control, so only authorised systems read what they're supposed to.

Without it, each device integration is a separate project. With Kepware, you connect once - and every downstream system, MES, ERP, cloud analytics, AI models, reads from the same data stream.

  • Not a SCADA
  • Not an HMI
  • Not an analytics platform
  • Connectivity middleware
  • OPC UA / MQTT gateway

Input layer

PLCs, robots, meters, sensors via EtherNet/IP, Modbus, S7, PROFINET, BACnet, DNP3 and 140+ more.

Kepware runtime

Channel → Device → Tag hierarchy. Data normalised, quality-stamped, buffered. Scan rates down to 10ms.

Output layer

OPC UA / DA, MQTT (IoT Gateway), REST API. Any client reads all devices through one interface.

Security

x.509 certificates, 256-bit encryption, user-based access control. Encrypted tunnel - only authorised systems read what they're supposed to.

1/
0

How It Works - Architecture Overview

Kepware operates as a three-layer architecture: collect raw data from devices, the runtime engine normalises and processes it, and the output interfaces expose it to consuming software applications.

1

Input layer (OT)

Device drivers

150+ protocol drivers connect to PLCs, robots, meters via EtherNet/IP, Modbus, S7, OPC UA, BACnet, DNP3 and others. Each Kepware driver handles one protocol family.

  • EtherNet/IP
  • Siemens S7
  • Modbus
  • PROFINET
  • BACnet
  • DNP3
2

Normalisation engine

Kepware server runtime

Channel → Device → Tag hierarchy. Data normalised, quality-stamped, buffered. Scan rates configurable down to 10ms for high-frequency applications.

  • Tag management
  • Buffering
  • Quality stamps
  • Redundancy
3

Consuming systems

Output layer (IT/OT)

OPC UA and DA (legacy), MQTT (IoT Gateway plug-in), REST API. Any client that reads one of these interfaces gets all devices - without touching each one directly.

  • OPC UA
  • MQTT
  • REST API
  • MES / ERP
  • ThingWorx
  • Azure IoT

The Kepware Product Family at a Glance

Kepware Server

Full-featured Windows server

  • 150+ protocol drivers
  • GUI + REST API configuration
  • IoT Gateway, Advanced Tags plug-ins
  • Up to 100,000+ tags
  • Redundancy (hot standby)
  • Windows Server 2016+

Subscription or perpetual

Kepware Edge

Lightweight Linux/Docker runtime

  • ~30+ drivers (subset of Server)
  • API-only configuration (JSON)
  • Docker / Kubernetes native
  • 1GB RAM minimum
  • ARM + x64 available
  • Managed via Kepware+ Manager
  • Subscription only

Subscription only

Kepware+ Manager

Fleet orchestration platform

  • Instance health dashboard
  • Central config deployment
  • License usage tracking
  • Audit trail & security (NIS2-ready)
  • Bulk version updates

Not available with perpetualli

Kepware Licensing: Subscription vs. Perpetual

Kepware is available as an annual subscription or a one-time perpetual license. TT PSC sells subscription only - Kepware+ subscription includes the software license, version updates, Velotic technical support, and access to Kepware+ Manager for centralised fleet management. Perpetual licenses require separate support contracts, exclude Kepware+ Manager, and create compliance gaps under NIS2.

What's included in a Kepware+ annual subscription

One annual fee covers everything needed to run Kepware in a production environment - with no hidden upgrade costs and no separate vendor customer care invoices.

  • Software license (12 months)
  • Version updates included
  • Velotic technical support
  • Kepware+ Manager access
  • NIS2 audit trail included
Option A

Perpetual license

One-time purchase. Lower total cost over five years on paper - but without centralised management, audit trail, or automatic updates. TT PSC does not sell perpetual.

  • One-time CAPEX payment
  • Kepware+ Manager - not available
  • Version updates - separate contract required
  • Velotic support - separate annual purchase
  • NIS2 audit trail - must be built separately
  • Multi-site management - per-instance, manual
Option B - TT PSC standard

Kepware+ subscription

Annual fee covers everything needed to run Kepware in production. No hidden upgrade costs, no separate vendor support invoices. Approximately 60% lower upfront than perpetual.

  • Software license, 12 months
  • Kepware+ Manager included
  • Version updates & major releases included
  • Velotic technical support included
  • SIEM-ready audit trail, NIS2 Article 21
  • Single portal, all sites - predictable OPEX
See subscription packages & pricingSee packages

Full perpetual vs. subscription comparison

FeaturePerpetual licenseSubscription (Kepware+)
Software licenseOne-time purchaseAnnual fee (~60% lower upfront)
Version updates & major releasesSeparate contract requiredIncluded
Velotic technical supportSeparate annual purchaseIncluded
Kepware+ ManagerNot availableIncluded
NIS2 audit trailNo centralised logging
Multi-site license managementPer-instance, manualSingle portal, all sites
Budget modelCAPEX (one-time asset)OPEX (predictable annual cost)
In-depth guide: Kepware Perpetual vs. Subscription

TT PSC also manages the full migration from perpetual to subscription - license audit, version assessment, and Kepware+ Manager enrollment - without rebuilding your existing configuration.

Why subscription?

Kepware+ Manager

Not available for perpetual licenses. With 3+ locations, per-instance management is a real operating cost (IT/OT overhead, time, risk of update errors). This isn't reflected in the license TCO, but it is reflected in IT man-hours.

NIS2 audit trail

Only subscription. A central audit log ready for regulatory review. With perpetual, this must be built separately, or you won't have it at all. For In-Scope companies, NIS2 isn't an option.

Lapsed support

Companies with perpetual plans often have lapsed customer care - because they don't renew it. Reinstatement of that requires additional costs.

Scalability

Deployment for a new location without Kepware+ Manager = on-site visit or VPN + manual configuration. With Manager - remote push in minutes.

1/
0

Kepware perpetual estate review

Unmanaged perpetual installations are your biggest NIS2 exposure - and your highest migration ROI. TT PSC runs a no-obligation Kepware estate review: we map every instance across your sites, identify version and gaps, and deliver a migration path to Kepware+ without rebuilding your existing configuration from scratch.

Kepware for Industry 4.0

Kepware's role in Industry 4.0 is connectivity & data infrastructure - not application. It provides the reliable, structured, real-time industrial automation data stream that every analytical software application depends on. Before you can do predictive maintenance, OEE analytics, digital twins or AI optimisation - you need machine data that's accurate, continuous, and standardised. That's what Kepware delivers.

Typical Kepware deployments reduce time-to-data by 60–80% compared to custom per-device integrations. For a five-plant enterprise deploying three new enterprise systems over five years, that compounding reduction is material.

OT/IT Convergence - Bridge the OT/IT Gap

Kepware+ Manager deployed as a centralised orchestration layer across global manufacturing facilities. Redundancy, data buffering and tag quality management handled from a single console - without on-site intervention. Fleet-wide configuration deployment and licence usage tracked centrally, region by region.

Result:

Single audit trail across all regions and a compliance-ready connectivity layer - no per-site administration overhead.

Unified Namespace (UNS) - Single Source of Truth for All Systems

Kepware publishes structured payloads via MQTT to a central broker. MES, ERP, cloud analytics and AI models subscribe to what they need - without touching the machine layer.

Discover what Unified Namespace can do for you.

Result:

Single audit trail across all regions and a compliance-ready connectivity layer - no per-site administration overhead.

Digital Twin - Live Simulation of Physical Assets

Kepware feeds real-time equipment data into your SCADA, MES, ThingWorx, Azure Digital Twins, NVIDIA Omniverse - whatever software solutions you pick - via OPC UA or MQTT at sub-100ms latency.

Result:

Single audit trail across all regions and a compliance-ready connectivity layer - no per-site administration overhead.

Predictive Maintenance - Act Before Breakdown, Not After

Kepware streams vibration, temperature, current draw and cycle counts at configurable scan rates down to 10ms to ML analytics platforms (ThingWorx Analytics, Azure ML, OSIsoft PI).

Result:

Single audit trail across all regions and a compliance-ready connectivity layer - no per-site administration overhead.

Industries we serve

Kepware is deployed across manufacturing, pharmaceuticals, oil & gas, and food & beverage - with industry-specific driver suites, compliance configurations, and data collection templates. TT PSC brings implementation experience from each of these sectors - worldwide.

Manufacturing & Automotive

Kepware aggregates data from Allen-Bradley ControlLogix, Siemens TIA Portal PLCs, FANUC and KUKA robot controllers on multiple production lines - feeding a unified OPC UA stream to MES and OEE dashboards. Key use cases: real-time OEE, downtime root cause, quality SPC data collection, cycle time analysis.

  • Real-time OEE
  • Downtime root cause
  • Quality SPC
  • Cycle time
Pharmaceuticals

Kepware connects bioprocess equipment, HVAC systems, analytical instruments and environmental monitoring to MES and LIMS. TT PSC configures Kepware for FDA 21 CFR Part 11 and EU GMP Annex 11 compliance - including audit trail activation, user access matrix, and IQ/OQ/PQ documentation. This configuration requires a certified integrator; it cannot be achieved through self-service deployment.

  • FDA 21 CFR Part 11
  • EU GMP Annex 11
  • IQ/OQ/PQ
Oil & Gas / Energy

Kepware's Energy & Utilities driver suite covers DNP3, IEC 60870-5-101/104, HART and ROC (Remote Operations Controller for gas metering) - enabling SCADA integration for remote wellheads, pipeline monitoring stations and substation automation without custom driver development. Integrates with OSIsoft PI historian and Emerson Ovation SCADA.

  • DNP3
  • IEC 60870
  • OSIsoft PI
  • HACCP
  • FSMA
  • BRC Global Standard
  • Emerson Ovation
Food & Beverage

Kepware connects packaging lines, filling machines, cold chain monitoring equipment and weighing systems to MES and traceability platforms. Kepware's Scheduler plug-in provides shift-based data collection common in F&B production. Relevant compliance: HACCP, FSMA, BRC Global Standard. Typical equipment: GEA, Tetra Pak, Bosch Packaging (Modbus, PROFINET).

  • HACCP
  • FSMA
  • BRC Global Standard
  • GEA
  • Tetra Pak
  • Bosch Packaging

Selected implementations

Global FMCG manufacturer

100+ Kepware instances, one central console

Kepware+ Manager deployed as a centralised orchestration layer across global manufacturing facilities. Redundancy, data buffering and tag quality management handled from a single console - without on-site intervention. Fleet-wide configuration deployment and licence usage tracked centrally, region by region.

Result:

Single audit trail across all regions and a compliance-ready connectivity layer - no per-site administration overhead.

Automotive tier-1

One connectivity layer, every vendor

Kepware deployed as a universal protocol translator across a heterogeneous machine fleet. Legacy and modern equipment from multiple vendors consolidated into a single stream feeding the factory's Unified Namespace - from which the MES draws production data without any direct machine connections.

Result:

Single audit trail across all regions and a compliance-ready connectivity layer - no per-site administration overhead.

Wood products

Single audit trail across all regions and a compliance-ready connectivity layer - no per-site administration overhead.

Kepware streams real-time process and equipment data from production lines to an analytics platform running predictive maintenance models. Vibration, temperature, cycle counts - continuous, standardised, actionable.

Result:

Maintenance teams receive early-warning signals before failures occur - shifting from reactive to condition-based intervention.

Food & confectionery

One OT layer, every downstream app

Kepware as the connectivity foundation for a full manufacturing data stack - feeding historians, production parameter optimisation, energy monitoring and more, all from a single OT data layer.

Result:

One standardised connection point for every application, eliminating per-system machine integrations across sites.

Kepware in the Velotic Ecosystem

Kepware is the industrial connectivity foundation of Velotic's technology stack. It acts as the OT data layer - collecting raw machine data and feeding it into ThingWorx, Velotic's IIoT and analytics platform, without custom middleware between the shop floor and the analytics layer.

Velotic productRole in the stackTT PSC delivers
Kepware+ - Kepware ServerOT connectivity layer - collects machine data via 150+ driversLicensing, unified architecture, implementation, managed services
Kepware+ - Kepware EdgeLinux/Docker runtime for distributed sitesEdge deployment, container architecture, fleet management
Kepware+ ManagerFleet orchestration - centralised management of all instancesSetup, configuration, ongoing managed services SLA
ThingWorxIIoT/analytics platform - digital twin, APM, dashboardsPlatform delivery within single TT PSC engagement
GE ProficyIndustrial data management - historian, MES, operations applications built on Kepware's OT data layerEvaluating Proficy alongside Kepware?Talk to TT PSC

Kepware + ThingWorx: how they work together

Kepware publishes tag data directly to ThingWorx Things via the ThingWorx native interface (secure data tunnel). Every sensor value or PLC status tag collected by Kepware becomes a live ThingWorx property - available immediately for dashboards, alerts, and analytics models. No custom middleware, no additional configuration layer.

TT PSC covers the full Velotic stack: Kepware licensing, architecture and configuration, and ThingWorx platform delivery - within a single engagement and a single contract.

Authorized partner vs. buying direct from Velotic

Velotic sells Kepware licenses directly. TT PSC also sells Kepware licenses - as a Velotic Authorized Partner. The difference is not the license.

The difference is what comes with it: pre-sales consulting, architecture design, Proof of Concept, installation, integration, and post-deployment SLA. Velotic provides the software. TT PSC delivers the working environment, connected with business applications results.

TT PSC is both Velotic reseller and system integrator. Licenses purchased through TT PSC are original licenses through a direct partner channel.

Talk to a Kepware specialist

We delivers official Kepware+ subscription licenses and full enterprise implementation worldwide - from a free discovery call to a stable production environment.

Questions we hear most

Kepware aggregates real-time data from industrial devices - PLCs, robots, meters, sensors - via 150+ protocol drivers and exposes it via OPC UA or MQTT to MES, ERP, and IIoT platforms. It is connectivity middleware: the layer between shop-floor equipment and enterprise IT systems that all Industry 4.0 client applications and software solutions depend on. It also allows to control diverse automation devices.