Omron

What is Omron?

Omron is a Japanese manufacturer of industrial automation that supplies sensors, PLCs, motion control, robotics, vision and machine safety, with its Sysmac platform at the core. The company was founded in 1933 by Kazuma Tateishi and is headquartered in Kyoto. Omron controllers run packaging machines, assembly lines, electronics production, automotive plants and pharmaceutical lines. That makes Omron one of the suppliers you meet in almost every machine-building OT environment, and a permanent part of OT convergence on the factory floor.

🧠 Who is Omron and where does the company come from?

Omron started in 1933 in Osaka as Tateisi Electric Manufacturing. Its first product was a timer for X-ray photography. The company later moved to Kyoto; the name Omron refers to the Omuro district where it settled. It has officially been called OMRON Corporation since January 1990, and had more than 28,000 employees in 2023.

Omron is broader than industrial automation. Besides the Industrial Automation business there are divisions for electronic components (relays, switches), social systems (such as ticket machines and energy solutions) and healthcare, known for its blood pressure monitors. For OT professionals the automation business is what matters most.

With the Adept acquisition, Omron extended its “ILO+S” strategy (Input, Logic, Output and Safety) to “ILO+S+R”, adding robotics as a fifth pillar.

The Netherlands plays a notable role. The European headquarters, Omron Europe B.V., is in Hoofddorp. ‘s-Hertogenbosch hosts a factory for the automation business, a development centre and the European logistics centre.

⚙️ Which PLC platforms does Omron offer?

Two generations of Omron PLCs coexist in the field: the classic SYSMAC series programmed with CX-Programmer (part of CX-One), and the newer Sysmac NJ and NX controllers that use Sysmac Studio.

The NX701 shows where the top end lies: up to 256 synchronised axes, a primary task cycle of 0.125 ms, an EtherCAT master, two 1 Gbit/s IP ports and a built-in OPC UA server. Some variants can talk directly to SQL databases or include an AI engine for predictive maintenance.

🔧 How does the Sysmac platform work?

Sysmac is the umbrella name for Omron’s integrated machine automation: one controller for logic, motion, robotics and safety, and one engineering tool, Sysmac Studio. Key characteristics:

• IEC 61131-3 - Sysmac Studio supports ladder diagram and Structured Text, including inline ST within ladder, with functions and function blocks.
• PLCopen motion - motion control uses standardised PLCopen function blocks, plus a CAM editor for complex motion profiles.
• Integrated components - servos, variable frequency drives, FH vision systems, NA HMIs and safety I/O are configured in the same project.
• 3D simulation - sequences, motion and robots can be tested virtually before the machine exists.
• Security features - a 32-digit security password, controller write protection, checks on controller name and serial ID, and password protection of project files.

The central idea: EtherCAT connects the controller to everything that has to be fast on the machine, while EtherNet/IP and OPC UA provide the links upwards and to other machines.

🌐 Which industrial networks does Omron use?

Communication modules and gateways also exist for PROFINET and Modbus TCP, among others, so machines with Omron control fit into a Siemens or mixed plant. All these flavours of Industrial Ethernet run over ordinary Ethernet, which makes the link to IT easy but also exposed. Increasingly, Omron controllers publish data via MQTT or OPC UA to edge platforms in an Industrial Internet of Things architecture.

🤖 What does Omron offer in robotics, vision and machine safety?

Through Adept and Techman, Omron has a broad robotics portfolio: SCARA robots, parallel (delta) robots for fast pick-and-place, six-axis robots, TM cobots and autonomous mobile robots (AMRs) for intralogistics. Delta Tau brought know-how in high-end motion controllers and CNC.

Vision is a strength: FH vision systems for inspection, positioning and code verification, plus industrial code readers. More and more inspections use AI models running directly on the line.

For machine safety, Omron supplies light curtains, safety relays, door switches and safety controllers. The NX safety CPUs are a safety PLC that runs within the Sysmac project. These products are designed and certified to ISO 13849 (ISO 13849-1, performance levels up to PL e), IEC 62061 and the underlying IEC 61508. IEC 61511 covers safety instrumented systems in the process industry, which is not the domain where Omron safety is typically applied.

🔐 What cybersecurity risks affect Omron controllers?

Omron PLCs came firmly into the spotlight in 2022. The state-level attack toolkit PIPEDREAM (INCONTROLLER) contained a module, BADOMEN, aimed specifically at NJ and NX controllers. Shortly afterwards Omron published three CVEs for NJ/NX, Sysmac Studio and NA HMIs:

Around the same time, the OT:ICEFALL research revealed that older CS/CJ/CP PLCs send the protection password in plaintext and do not cryptographically check downloaded logic. Anyone with network access can then change programs via FINS. The advice there includes using the hardware DIP switch for write protection.

Typical threats in Omron environments are Ransomware on the engineering workstation, unmanaged remote access by machine builders, shared passwords and outdated firmware. Measures:

🏗️ Where does Omron fit in the OT architecture?

Omron products sit mainly in the lower layers of the Purdue Model. Higher layers are reached through standard interfaces to other vendors’ systems.

That link to Level 3 is exactly where IT and OT meet, and where segmentation and a controlled DMZ are needed.

🧪 How do you approach security and management of an Omron machine?

A practical approach for a European plant whose machines run on Omron controllers:

1. Inventory all controllers, firmware versions and Sysmac Studio or CX-One installations, including machine builders’ laptops.
2. Segment each machine or line into its own zone in line with IEC 62443, with a firewall that only passes the required protocols. FINS does not belong outside the machine zone.
3. Enable the built-in security: controller passwords, write protection and, on older CS/CJ/CP, the DIP switch.
4. Control remote access through one managed solution with MFA and logging, not through the vendor’s own router.
5. Plan updates of firmware and Sysmac Studio, with testing, downtime planning and a fallback scenario.
6. Monitor the network for downloads and mode changes, in line with NIST SP 800-82 and Defense in Depth.

Machines with Omron control often run for fifteen years or more, so lifecycle management of legacy CJ and CS PLCs is a recurring topic. In pharmaceuticals, validation requirements under GAMP and GMP are added: every firmware update is then a controlled change.

Regulation is also pushing towards more secure machines. The Machinery Regulation (applying from January 2027) requires protection against corruption of safety functions, and the Cyber Resilience Act sets requirements for products with digital elements, such as PLCs and engineering software. Organisations covered by NIS2 must demonstrably manage their supply chain and vulnerabilities. A Zero Trust approach to remote access fits well with this.

🔄 How does Omron compare with other PLC vendors?

Omron stands out mainly in fast, compact machines where motion, vision and robots come together in one controller.

❓ Frequently asked questions

Which software do you use for Omron PLCs?

Modern Omron NJ and NX controllers are programmed with Sysmac Studio, which also configures motion, vision, safety and HMIs. Older Omron PLCs from the CS, CJ and CP series use CX-Programmer from the CX-One suite.

Which programming languages does Omron Sysmac Studio support?

Omron Sysmac Studio follows IEC 61131-3 and supports ladder diagram and Structured Text, including inline ST within ladder. Motion is programmed with PLCopen function blocks.

Is Omron the same company as Omron Healthcare?

Omron Healthcare, known for blood pressure monitors, is a subsidiary of the same Japanese OMRON Corporation. Industrial automation is the responsibility of the Industrial Automation business, whose European headquarters is in Hoofddorp in the Netherlands.

Was Omron affected by PIPEDREAM?

The PIPEDREAM toolkit contained a module, BADOMEN, that could attack Omron NJ and NX controllers using, among others, the vulnerability CVE-2022-34151. No publicly confirmed attacks with this module are known, but Omron released firmware updates and users should apply them.

Is Omron’s FINS protocol secure?

Omron’s FINS protocol has no authentication or encryption, so anyone with network access can read or modify a PLC. FINS should therefore stay inside a protected machine zone behind a firewall.

Why does Omron use EtherCAT?

Omron uses EtherCAT as its machine bus because it offers very short cycle times and precise synchronisation through distributed clocks. That is needed to drive tens to hundreds of servo axes at the same time.

📌 In summary

Omron is a Japanese automation vendor whose Sysmac platform brings PLC, motion, vision, robotics and safety together in one controller. That integration makes machines with Omron control powerful, but the vulnerabilities around PIPEDREAM and FINS show that segmentation, managed remote access and timely firmware updates are essential.

Omron illustrates the Industry 4.0 trend: AI, edge analytics and cybersecurity become part of the machine itself, increasing the dependency on IT platforms and IT skills on the shop floor.