Industrace: an open-source foundation for building visibility and order in the ICS world

A Personal Reflection, Then a Line of Code

While preparing for the SANS GRID certification, I ran into a simple fact: asset and industrial network management is still too fragmented.
Solutions exist, but they are often closed, expensive, designed for IT contexts, or too tied to a single vendor.

That’s when I started designing Industrace: an open-source Configuration Management Database (CMDB) built for ICS and OT environments, but with an enterprise logic that is still accessible to small organizations.
It’s not the ultimate solution. But it’s a concrete starting point—usable and improvable together with the community.


What is Industrace?

Industrace is a containerized application (AGPL license) that allows you to:

  • Map assets, connections, and industrial relationships

  • Visualize the network with interactive maps

  • Calculate a risk index based on operational parameters (location, maintenance, updates, Purdue level)

  • Generate printable reports for offline use

  • Track every change with a complete audit trail

  • Manage multiple companies or facilities with a multi-tenant architecture

  • Customize everything with RBAC, multilanguage, and REST APIs

It’s designed for anyone who wants to understand, organize, and document an industrial network—without starting from scratch or relying on Excel spreadsheets.

I dare to say setup takes just a few minutes: the application is modern and scalable.


Why Open Source

Open source is a strategic choice.
It means:

  • Collaboration: field professionals can contribute to making Industrace better aligned with real-world cases

  • Customization: every organization can adapt it to their own assets and processes

  • Transparency: every line of code is visible, auditable, and improvable

We don’t claim to be the “ultimate OT experts.” Instead, we aim to develop useful tools built with attention to usability and real operational needs.


What You Can Do with Industrace Today

✅ Import, export, and manage assets, vendors, and contacts
✅ Visualize connections and interfaces on a map
✅ Use multi-level RBAC for differentiated access
✅ Print physical documentation kits for assets
✅ Track every action with audit logs
✅ Access via a modern, multilingual web interface
✅ Install in minutes via Docker


And Tomorrow? The Pro Version

The project already has a clear roadmap for companies with more advanced needs.
The Pro version, sponsored by BeSafe S.r.l., will include:

-Integration with SSO / LDAP / SAML
-Report editor with customizable templates
-Automated data analysis and ICS documentation
-Visual runbook editor for incident response and black-start
-Connectors for network probes based on sniffing and metadata
-Audit integration with syslog systems


An Open Project, to Build Together

Our goal is to create an open and collaborative standard that can be adopted by both large enterprises and small organizations—because often the needs are the same: visibility, control, and documentation.

Anyone can contribute, suggest use cases, or simply try it out and give us feedback.
Industrace is not perfect, but it is open, solid, and ready to grow.


Discover Industrace

GitHub: github.com/industrace
Documentation included in the repository
Contact: industrace(at)besafe.it

Maurizio Bertaboni
Author and maintainer of the project

Hai bisogno di rendere la tua rete più sicura?
Richiedi una consulenza