logiccloudORCHESTRATE

Your edge ecosystem. Less effort. More security.

Deploy applications centrally. Keep devices up to date. Control access precisely.

Request a demoSee the architecture
DEPLOYprovide
UPDATEkeep current
MONITORknow the state
Target systems
  • Kubernetes
  • Docker
  • Podman
The starting point

What works easily with a few devices becomes a challenge with many devices across sites.

With every new machine, the number of applications, devices and software versions grows. What still works easily at one site becomes a daily challenge across many:

  • Onboarding devices
  • Installing software
  • Granting access rights
  • Rolling out updates
  • Accessing systems for service

logiccloud ORCHESTRATE brings these tasks together in one central platform.

So your team spends less time on individual installations, handles service cases faster and looks after your systems traceably across their whole lifecycle.

With every machine

Repository, devices and infrastructure in one platform.

Applications from the central repository, device management and secured web access to all connected devices come together in ORCHESTRATE and reach edge devices with Docker or Podman just as they reach Kubernetes in the data centre, in the private or the public cloud.

Architecture diagram: logiccloud ORCHESTRATE in the middle. On the left, device management (security patch, config) and the shop repository with Mosquitto, Node-RED, Grafana, InfluxDB, Telegraf, logiccloud CONTROL, CODESYS, Customer App, TwinCAT and zenon. At the top, three secured web accesses for desktop, tablet and smartphone. At the bottom, the target systems: Kubernetes (data centre, private and public cloud) with agents, Docker and Podman on edge devices with device agents. Margo logo bottom right.

Operate

01
Onboarding

Start simply.Onboard devices securely.

A simple, secured onboarding process makes it easy to add new devices to your edge ecosystem. Devices are assigned unambiguously and brought under central management in a controlled way.

That cuts manual set-up steps and lays the groundwork for secure deployment, monitoring and maintenance from the start. So you get from the first connection to productive operation faster.

From device to operation
  1. 1Connect
  2. 2Assign uniquely
  3. 3Onboard under control
  4. 4Productive
02
Deployment

Your applications.On the right infrastructure.

Automation, visualisation, data processing or your own customer application: deploy the software you need from a central repository and distribute it to your target systems.

Combine logiccloud CONTROL with other applications such as Node-RED, Mosquitto, Grafana or InfluxDB. ORCHESTRATE brings together deployment on edge devices with Docker or Podman and in Kubernetes environments in the data centre, the private cloud or the public cloud.

So you use one management approach for different applications and infrastructures, and put your solutions together to fit your customers' requirements.

Shop · Repository
  • logiccloud CONTROL
  • Node-RED
  • Mosquitto
  • Grafana
  • InfluxDB
  • Telegraf
  • CODESYS
  • TwinCAT
  • zenon
  • Customer App
Target systems
  • KUBERNETESData centre · private · public cloud
  • DOCKEREdge device
  • PODMANEdge device
03
Updates & patches

Update centrally.Cut down on repetitive work.

New features, changed configurations and security patches are part of every installation's lifecycle. With ORCHESTRATE you organise these tasks centrally and reduce manual work on individual devices.

That simplifies looking after your systems, gives you traceable software versions and makes supporting growing installations easier to plan. Proven software combinations can be deployed again and again and updated selectively.

Software versionsExample view
DeviceApplicationStatus
Line 1 · Edgelogiccloud CONTROLcurrent
Line 2 · EdgeNode-REDupdate planned
Plant South · K8sGrafanacurrent
Plant North · EdgeSecurity patchupdate planned
04
Monitoring & service

Know the state.Act faster when service is needed.

Status and telemetry data show how your applications and devices are working. Through secured web access your team reaches the connected operating and service interfaces: on desktop, tablet or smartphone.

Your experts can narrow problems down remotely and respond more precisely. That shortens troubleshooting, saves travel and can reduce on-site visits.

Status & telemetryExample view
CPU
Memory
Connection
Secured web access
  • Desktop
  • Tablet
  • Smartphone

Secure

A
User management

Granular user management.The right permissions for every task.

Development, operations and service need different access rights. With granular user management you decide precisely who may see or use which devices, applications and functions.

So you give employees, customers and external service partners the access their task requires. Responsibilities stay clear, sensitive functions stay protected, and working across company boundaries stays under control.

Rights by roleExample
RoleDevicesApplicationsWeb access
Developmentviewmanageuse
Operationsmanageuseuse
Service partnerviewviewuse
Customerview—use
B
Identity & authorisation

The highest security for access.Verify identities. Enforce permissions.

With the MARGO Identity and Authorization Framework (MIAF), logiccloud ORCHESTRATE relies on unambiguous identities and targeted authorisation. Only authenticated and authorised users and services get access to the resources released to them.

Together with secured onboarding and granular user management, this gives you controlled access to your edge ecosystem: from onboarding new devices to everyday remote access.

Every request passes through
  1. IdentityUser or service
  2. AuthenticationWho is it?
  3. AuthorisationWhat is allowed?
  4. AccessReleased resource

margo Identity and Authorization Framework (MIAF)

C
CRA audit trail

Prove security.Prepare audits more easily.

Which software version was installed when?

Who changed a configuration?

When was a security patch applied?

The CRA audit trail in logiccloud ORCHESTRATE records security-relevant access, changes, deployments and updates traceably. So you keep the history of your applications and devices in view and support your evidence under the Cyber Resilience Act.

That reduces the effort of preparing audits and gives you transparency across the whole lifecycle of your systems.

Audit trailExample entries
  • PATCHSecurity patch applied on Plant North · Edge
  • CONFIGNode-RED configuration changed by Operations
  • DEPLOYlogiccloud CONTROL deployed on Line 2
  • ACCESSService partner web access to HMI Line 1
AI agent · logiccloud agent-kitMCP
Request

Pump P2 should shut down after 5 s of dry running. Please implement and roll out to plant North.

Reading project “Pump station” via logiccloud-control …

Main.st: function block FB_DryRun added (TON, 5 s)

HMI page “Pumps”: alarm “Dry run P2” added

Cloud build: succeeded, 0 errors

Change waiting for your approval

Main.st · IEC 61131-3

1FUNCTION_BLOCK FB_DryRun

2VAR_INPUT xRunning : BOOL; xFlow : BOOL; END_VAR

3VAR_OUTPUT xShutdown : BOOL; END_VAR

4VAR tDelay : TON; END_VAR

5tDelay(IN := xRunning AND NOT xFlow, PT := T#5s);

6xShutdown := tDelay.Q; // alarm to the HMI

7END_FUNCTION_BLOCK

Rollout · canary · plant North
DeviceHardwareVersionStatus
PS-North-01WAGO CC1001.4.11.4.2runningupdated
PS-North-02ctrlX CORE1.4.11.4.2waitingupdated
PS-North-03Phoenix EPC1.4.11.4.2waitingupdated
PS-North-04Raspberry Pi1.4.11.4.2waitingupdated

Batch approved (admin) · recorded in the audit log

Illustrative example — names and values are made up.

logiccloud agent-kit

Rollouts by AI agent, too

Through the agent-kit, the AI agent of your choice drives rollouts in ORCHESTRATE: show a dry run, roll out in stages, pause, resume or stop. Batch approvals stay with admins.

AI agents with logiccloud
Logo of the open standard Margo, margo.org

Margo

Built on the open Margo specification.

Margo, an initiative under the Linux Foundation, defines a common management interface for industrial edge systems. logiccloud is a member of the initiative. ORCHESTRATE implements the Margo Workload Management API — without adding extensions of its own.

The specification is not final yet: preview releases have appeared since December 2025, and general availability is expected in 2027. We keep ORCHESTRATE current with every release.

  • More choice of edge hardware and infrastructure
  • Faster integration of Margo-compatible devices once they exist
  • Reusable applications and operating processes
  • Fewer proprietary dependencies and long-term investment protection

Margo creates the common language. ORCHESTRATE turns it into controlled, verifiable operation.

Scale

Grow with your business.

New customers and additional sites are meant to grow your business. With ORCHESTRATE you lay the groundwork to onboard devices securely, deploy proven solutions again and again, and look after your edge ecosystem centrally.

  • Machine builders

    Simpler service.

  • Operators

    A better overview of applications and devices.

  • Integrators

    A repeatable path from the first installation to operation across sites.