Rover Field Network Systems

On-premise IoT for life-support systems

Rover IoT Global

Monitoring for the systems a site cannot operate without: fuel and water level, power, environmentals, access. It runs inside your boundary on infrastructure you control, across two regions that are both live, and it is built to keep reporting when a site, a link, or a gateway is lost.

On premise Two regions, both live FIPS 140-3 CIS Level 2 NIST aligned

What it watches

Fuel & liquid

Level and consumption

Tank level by sonar or pressure, with consumption trends and the thresholds that matter before a generator stops rather than after.

Water

Supply and leak

Level, flow, and leak detection across supply and storage, in plant rooms and in places nobody visits daily.

Environmentals

Temperature and humidity

Server rooms, cold storage, magazines, and any space where an excursion becomes an incident quietly and overnight.

Power

Current and load

Clamp-based current sensing on circuits and plant, so load and failure show up as data rather than as a phone call.

Access

Door and gate contact

Open, closed, and how long it has been that way, on doors and gates that are rarely in view.

Extensible

New sensor types

Device profiles and payload decoding are configuration. Adding a sensor family is an onboarding task, not an engineering project.

Long-range, low-power radio reaches the far corners of a site without running cable or depending on site Wi-Fi. Sensors last years on a battery.

Why on premise

The telemetry that matters most is the telemetry you cannot outsource

A hosted IoT platform puts your fuel levels, your site occupancy, and your plant behaviour in someone else's cloud, and makes your visibility contingent on a working internet connection and a vendor's business decisions. For life-support monitoring both are the wrong dependency.

IoT Global runs entirely inside your boundary. The sensors, the radio network, the database, and the dashboards are all yours. A severed uplink costs you remote access, not local monitoring, and there is no renewal on which your visibility depends.

Resilience model

Built for the day a region is gone

REGION A REGION B NETWORK SERVER live · broker and cache local NETWORK SERVER live · broker and cache local DATABASE · PRIMARY time series + dashboards DATABASE · REPLICA promoted on region loss streaming replication FIELD GATEWAYS & SENSORS fuel · water · power · environmentals · access each holds two network server addresses primary standby, other region
Nothing here is warm standby waiting to be woken. Both regions run live, every gateway already holds an address in the other one, and coverage overlaps so a single failed gateway thins the map rather than blanking part of it. The only manual step in a region loss is promoting the replica.

Posture and delivery

Security baseline

Cryptography
FIPS 140-3 validated modules
Benchmark
CIS Level 2 server profile, with mandatory access control enforcing
Hardening
Applied as the final gated step, then verified, so nothing later relaxes it
Segmentation
Its own encrypted overlay with its own trust root, deliberately separate from the rest of the estate, so exposure to hundreds of field gateways cannot reach your core services
Credentials
Reachable only from the build control node, never held on the service hosts
Evidence
Benchmark audit output captured per host as part of the build

Build and scale

Delivery
Fully automated, phased with a review gate between each phase
Verification
A smoke-test pass runs after every major phase, not only at the end
Rebuild
Any host can be rebuilt from the automation rather than recovered by hand
Scale
Sized for 500 to 5,000 devices per deployment
Retention
Time-series storage sized to the retention window you need
Integration
Feeds the same plane as the rest of the Rover estate, and pairs with Posture for evidence reporting