A parallel telemetry path that keeps operating when the grid doesn’t
RelayQ is a deterministic edge runtime for industrial data systems that brings industrial equipment (Modbus, DNP3, OPC UA, BACnet/IP) and IoT sensors (MQTT, Sparkplug B) into one data path.
The energy sector is undergoing its largest transformation in a century: decentralized generation, distributed energy resources, real-time grid balancing, and regulatory pressure on software supply-chain transparency. The data path connecting substations, DERs, smart meters, and control centers must remain predictable even when field conditions are not.
Grid systems fail in unpredictable ways
Field sites lose power. Substations disconnect. Smart meters misbehave. Communication links drop across large geographic areas.
In traditional grid architectures, these failures propagate: a compromised device can flood the system, inconsistent state spreads, and operators lose visibility at precisely the wrong moment.
RelayQ is designed to contain these failures. Each device is isolated. Each connection is strictly bounded. The system continues operating across connectivity gaps and malfunctioning or compromised endpoints.
Market challenge
Energy operators and grid companies face compounding pressures:
- Grid decentralization: distributed energy resources (solar, batteries, EVs) require real-time coordination
- Critical infrastructure regulation: NIS2, CRA, NERC CIP, and IEC 62351 demand provable software security
- Legacy SCADA limitations: polling-based systems can’t keep pace with real-time grid dynamics
- Remote, harsh environments: substations and field assets operate with intermittent connectivity and limited maintenance access
- Scale: smart meters, EV chargers, and grid sensors generate high-frequency telemetry across a growing endpoint population
Why traditional approaches break down
Legacy SCADA limitations
| Legacy SCADA | RelayQ edge runtime |
|---|---|
| Polling-based (seconds to minutes) | Event-driven, real-time publish/subscribe |
| Point-to-point, siloed | Many-to-many, unified data path |
| Proprietary protocols | Open standards (MQTT 3.1.1, Sparkplug B, Modbus, DNP3) |
| Difficult to extend | Single static binary per site, added incrementally |
| Limited visibility | Full observability via Prometheus metrics |
Runtime dependency problem
Dependency-heavy stacks create lifecycle burden that multiplies across hundreds of substations and field sites:
- Every CVE requires coordinated patching across remote, hard-to-access locations
- Complex SBOMs expand NIS2/NERC CIP audit scope
- Large container images don’t fit on constrained substation gateways
- Patch windows disrupt grid operations
More importantly, traditional systems do not control how failures propagate across substations, devices, and control systems.
How RelayQ addresses energy requirements
- An acknowledged QoS 1 message is written to disk before the acknowledgement, so a power loss after the acknowledgement does not lose it
- Connectivity loss does not corrupt system state
- Misbehaving or compromised devices cannot impact others
- Resource usage remains bounded per connection
- No slow, failing, or compromised device can stall the system
Supporting characteristics:
- Std-only core (zero third-party crates in Lite, twelve with TLS on Linux): few third-party components to patch across hundreds of remote substations
- Sparkplug B ingress validation: topic shape, namespace/version, and message type are enforced at ingress; payload-level validation is not yet wired
- One binary under 10 MB: fits on constrained Linux field gateways beside substation RTUs
- Rate limiting + OOM guard: prevents compromised or malfunctioning meters from flooding the grid bus
- Default-deny ACL: segments DER traffic from control traffic from metering traffic
Where RelayQ fits in the energy architecture
RelayQ runs alongside your existing grid SCADA infrastructure, not inside it. Your brownfield control path (RTUs → Substation SCADA → Grid SCADA/EMS → Historian) remains untouched.
RelayQ reads from the same RTUs and IEDs via DNP3 and Modbus, providing a parallel telemetry path for cross-site visibility, DER coordination, predictive maintenance, and remote operations.
RelayQ operates at three levels:
| Role | Where it runs | What it does |
|---|---|---|
| Substation runtime | Linux gateway beside the RTU (ARMv7/ARM64) | Reads sensor data via DNP3/Modbus, buffers during connectivity gaps |
| DER aggregation runtime | Edge server (ARM64) | Aggregates solar, battery, EV charger telemetry |
| Central platform | On-prem server (x86_64) | Aggregates substation and DER telemetry, bridges to remote operations |
Integrates with:
- SCADA platforms: grid-specific SCADA for transmission, distribution, and generation
- Energy protocols: DNP3 (native), Modbus (native); IEC 61850 via a third-party gateway publishing MQTT or Sparkplug B
- DER management systems: solar inverter controllers, battery management, EV aggregators
- Smart metering: AMI head-end systems (via MQTT bridge)
- Cloud platforms: AWS IoT Core (via MQTT bridge, validated); Azure IoT Hub via the bridge’s X.509 path only (unvalidated; no SAS-token support); any MQTT 3.1.1 endpoint (the bridge cannot negotiate MQTT 5.0 with an upstream)
- Analytics: InfluxDB, TimescaleDB, PI System, predictive maintenance platforms
- Monitoring: Prometheus + Grafana, utility NOC dashboards
Energy use cases
Smart grid real-time monitoring
Voltage, frequency, power flow, and fault indicators stream from grid sensors to control centers. RelayQ’s event-driven pub/sub replaces legacy polling, so operators see grid state as it is published, not minutes-old snapshots. Sparkplug B traffic with the wrong topic shape, namespace/version, or message type is rejected at ingress.
DER coordination and dispatch
Solar inverters, battery systems, and EV chargers publish generation/consumption data. RelayQ’s topic-level ACLs ensure DERs can only publish to their assigned topics. Dispatch commands toward DERs (curtailment, setpoints, reconnect) are opt-in, license-gated write-back. A misbehaving DER cannot impact other devices or the coordination system.
Substation automation
Protection relay status, breaker status, transformer telemetry, and environmental sensors report through RelayQ as a parallel telemetry copy. The system continues operating even when individual substations drop off the network.
Pipeline and remote asset monitoring
Oil and gas pipelines, remote pump stations, and offshore platforms publish pressure, flow, and vibration data over satellite or cellular links. RelayQ buffers messages to disk during connectivity gaps and replays them when backhaul resumes; the bridge’s connection-liveness detection and delivery guarantees are still being hardened, so treat this as buffered best-effort delivery today. No slow or disconnected remote site can stall the central ingestion pipeline.
EV charging network management
EV chargers report session data, power delivery, faults, and availability. RelayQ handles telemetry from geographically distributed chargers without requiring heavy infrastructure at each site. A misbehaving charger cannot impact other sessions or the fleet backend.
Security mapped to energy threats
| Energy threat | How RelayQ mitigates |
|---|---|
| Grid disruption via malicious control messages | Default-deny ACL; write-back is opt-in and license-gated |
| Compromised smart meter flooding the system | Per-client rate limiting caps message volume per device |
| Supply-chain attack on runtime dependencies | Std-only core (twelve pinned crates with TLS on Linux, none in Lite), no async runtime, no OpenSSL |
| Substation gateway compromise | IP allowlist + mTLS, only known endpoints connect |
| Nation-state attack on grid communications | Minimal attack surface (std-only core, one binary under 10 MB) + audit logging for forensics |
| Data manipulation affecting grid balancing | Sparkplug B ingress validation rejects traffic with the wrong topic shape, namespace/version, or message type |
Compliance and certification readiness
| Standard | RelayQ positioning |
|---|---|
| IEC 62351 (Power systems security) | TLS 1.3, mTLS, role-based access control, audit logging |
| IEC 62443 (Industrial cybersecurity) | Minimal SBOM (non-TLS build: no third-party crates; TLS build adds rustls), default-deny ACL, brute-force protection |
| NERC CIP (North America) | Minimal attack surface, access control, audit trail, incident-ready logging |
| NIS2 / CER (EU) | Supply-chain transparency, security-by-design, incident response readiness |
| IEC 61850 (Substations) | Complementary; IEC 61850 data reaches RelayQ via a third-party gateway publishing MQTT or Sparkplug B |
RelayQ is not yet formally certified to these standards. It is designed with compliance readiness in mind; the engineering evidence maps to audit requirements.
Proof points
- 6 million fuzz inputs, zero panics: codec hardened against malformed packets from any source
- 4,902 automated tests: traced to the protocol specifications, with per-requirement conformance reports
- Six 1-hour soak runs, zero message loss (lab, x86_64, May 2026)
- ~580k msg/s QoS 0 throughput on a 2-core x86_64 lab laptop (~3,700 msg/s on a Raspberry Pi 3)
- Durability contract: an acknowledged QoS 1 message is written to disk before the acknowledgement, so a power loss after the acknowledgement does not lose it
- Under 10 MB on armv7: sized for substation-class Linux gateways
Expected operational improvements
| Outcome | How |
|---|---|
| Reduced grid outage impact | Event-driven fault indication replaces minutes-old polling data |
| Lower maintenance cost across remote sites | A std-only core means few third-party components to patch across hundreds of substations |
| Faster regulatory compliance | Minimal SBOM (non-TLS build: no third-party crates; TLS build adds rustls), audit logging, access control by design |
| Improved DER coordination | Real-time pub/sub enables faster balancing response |
| Lower infrastructure cost at the edge | One binary under 10 MB runs on existing Linux edge gateways beside your RTUs |
| Better grid visibility | Event-driven telemetry + Prometheus metrics feed operational dashboards |
Legacy integration
RelayQ does not require replacing existing SCADA or energy management systems. It deploys incrementally:
- Start at one substation: install on a single Linux gateway alongside the existing RTU
- Bridge legacy protocols: native DNP3 and Modbus, or a third-party IEC 61850 gateway publishing MQTT
- Run in parallel: validate data quality without disrupting existing SCADA operations
- Expand gradually: add more substations and field sites as confidence builds
No big-bang migration. No vendor lock-in. RelayQ is a single binary you can deploy, test, and remove without side effects.
Deployment options
| Target | Architecture | Deployment |
|---|---|---|
| Substation gateway | ARMv7, ARM64 | Static binary on hardened Linux |
| Control center | x86_64 | Docker container or systemd service |
| DER aggregator | ARM64, x86_64 | Bare binary with WAL persistence |
| Remote site gateway | ARMv7 | Full build under 10 MB (or the smaller Lite build) on constrained Linux |
All deployments are a single static binary, no runtime, no interpreter, no shared libraries required.
Proof points are lab measurements on the stated hardware and build; results in your environment will differ. Method and full test evidence are shared with pilot customers.
Test it under failure, not in a demo.
One of your sites, one gateway, 30 days, with remote support from our engineers.
Apply for a pilotJust want to test it first? Register for an access key to the Capped build: every feature, 10 connections, no time limit, no support.