Ultimate Cybersecurity

Virtual PLCs (vPLCs) are a type of software-defined PLC (Soft PLC, also known as PC-based control) that run on general-purpose computing hardware instead of traditional PLCs. While both Virtual PLCs and Soft PLCs are software-based, Virtual PLCs run in highly secure, containerized environments, whereas Soft PLCs run directly on the host operating system. Containers provide stronger cybersecurity through isolation, as each vPLC instance operates in its own protected space with its own firewall, minimizing the risk of data breaches and malicious attacks by threat actors.

The best Virtual PLCs implement Zero Trust: a network security model that assumes no device is inherently trustworthy, regardless of its location in or outside the network perimeter. Zero Trust architecture mandates strict identity verification, least-privilege access, and continuous monitoring of every connection request. In practical terms, the vPLC securely connects to a Zero Trust access control server, which then ensures only authorized users or devices may access the vPLC. Since the vPLC only makes an outbound connection, the firewall can be completely closed to incoming connections, virtually eliminating the attack surface.

(VPN servers are insufficient, as they allow unrestricted access between all connected devices.)