Questions teams actually ask

It is warehouse control software from Electrol Systems, Inc. It verifies scan, weight, size and label, decides a destination, handshakes with the PLC, and records what happened. It also carries operator screens, alarms, a historian and multi-vendor drivers. It does not own motion, and it is not a safety controller.

Mis-sorts caused by guessing a lane when a scan is late; destination logic trapped in one-off PLC code; operator screens rebuilt from scratch; thin history of what actually diverted; and a new custom integration every time a controller family changes. The platform addresses those with verification, confirmed diverts, a fail-safe exception path, a drag-and-drop HMI, a historian, and drivers Electrol commissions per site.

HTTPS is on by default and is TLS 1.3 only — TLS 1.2 is an administrator opt-in for named legacy clients. HSTS and Secure, HttpOnly, SameSite cookies are set on HTTPS. A self-signed ECDSA P-384 certificate is generated on first run; administrators import a site certificate. WebSockets run over WSS. Gateway-to-gateway and edge links use mutual TLS. MQTT runs over TLS. SMTP and database connections require TLS. OPC UA prefers Aes256_Sha256_RsaPss SignAndEncrypt; a None-mode session is for compatibility only and is not encrypted. Configuration secrets, credentials and backups use AES-256-GCM envelope encryption, with a 0600 machine-local key file or an Argon2id administrator passphrase, and a key-rotation command. Passwords are hashed with Argon2id. Licenses, project images and revocation lists are Ed25519-signed. Sealed project images are AES-256-GCM and Ed25519, bound to the site and the machine. PLC fieldbus protocols such as Modbus TCP, EtherNet/IP and S7 are not natively encrypted; recommended mitigations are CIP Security where supported, a segmented OT network, a VPN or IPsec tunnel, or an edge gateway next to the PLC with an encrypted uplink. The local SQLite historian is not page-encrypted; use encrypted backups and disk encryption.

Live writes are an administrator-controlled, audited capability. Safety, motor and PLC-mode commands are on a blocklist that cannot be turned off. An optional tag allow-list can further limit what may be written. Program download, firmware and run/stop remain in the vendor engineering tool.

Electrol Systems is the company that owns and engineers Secure Sorter. It also designs industrial control panels, PLC programs, conveyor and MDR systems, and safety. Secure Sorter is the software layer used in that integration work.

No. This site does not offer installers, licenses, prices or a free trial. Electrol delivers a signed runtime for Windows, macOS or Linux as part of a commissioned project. If you have a project, write to [email protected].

No. The PLC owns motion. Motor-driven roller cards own zero-pressure accumulation. Secure Sorter decides destinations and records events. The PLC executes and confirms.

No. It is a non-safety system and does not claim a SIL or PL rating. It may display safety status. It does not command a safety function. E-stop graphics on a screen are not safety devices. Electrol designs personnel protection as part of the physical system.

The carton is sent to an exception lane or a recirculation path. The software does not guess a destination. That is a design rule, and it is how the platform aims to reduce mis-sorts without inventing a rate.

Drivers in the platform include Logix EtherNet/IP, legacy PCCC, Siemens S7, Modbus TCP, an OPC UA client, MQTT with Sparkplug-style publishing, Omron FINS, Mitsubishi MC, Beckhoff ADS, DNP3 and BACnet/IP, plus industrial scanners, scales and label printers. Which ones are used, and how they are tested, is part of Electrol's commission for that site — not a vendor certification. Fieldbus protocols such as Modbus TCP, EtherNet/IP and S7 are not natively encrypted; Electrol mitigates with CIP Security where supported, a segmented OT network, a VPN or IPsec tunnel, or an edge gateway next to the PLC with an encrypted uplink.

Engineering Studio is a drag-and-drop designer. It includes a 119-piece original conveyor library (belt, roller and gravity, with headings and curve ports), warehouse and equipment symbols, and ISA-101 or color looks. Studio is unlocked with an Electrol engineering key and is not a public editor on this website.

Yes. The plant runtime runs on the plant network and does not need a cloud connection to verify a carton or decide a lane. Electrol delivers that runtime for Windows, macOS and Linux.

The host system issues work. Secure Sorter takes that work, verifies cartons, and reports destinations and events. Orders can be released in a wave or a batch when Electrol configures that policy. The exact host interface is commissioned per site.

Operators use runtime screens on the sealed plant runtime. Electrol engineers use Engineering Studio and Gateway Admin to design views, commission devices, manage users and licenses, and take backups. Those tools are delivered with the project, not as a self-serve portal here.