Full-disk encryption
Everything stored on the device is encrypted at rest with AES-256, and the key is bound to that individual unit. Pull the storage out and it cannot be read anywhere else.
Beta · available to order
One machine. One appliance. No compromises.
CodePod connects a single CNC machine to your shop network over an encrypted, isolated link. It can also carry machine data back the other way, so the same device that secures your programs feeds your monitoring dashboard.
What CodePod does
CodePod is a sealed appliance that sits between one CNC machine and your network. The machine plugs into one side by Ethernet. Your shop or office network connects to the other, by Ethernet or Wi-Fi.
Programmers and office staff upload G-code, tooling data, and setup sheets through a web browser or any SFTP client. Those files appear on the machine as an ordinary network file share. Nothing is installed on the control, and nothing about the way your operators work has to change.
What the machine cannot do is reach your network. Traffic does not route between the two sides — only files cross, and only after the person sending them has authenticated.
At a glance CodePod
- Machines per unit
- 1
- Connection to machine
- Ethernet
- Connection to your network
- Ethernet or Wi-Fi
- How you upload
- SFTP or HTTPS browser
- How the machine sees files
- Network file share
- Encryption at rest
- AES-256 full disk
- User accounts
- Multiple, isolated
- Machine data forwarding
- MTConnect, OPC‑UA
- DNC drip feed
- Yes, Ethernet type
- Internet required
- No
Best suited to
Machines with a working Ethernet port, and shops that also want machine uptime data off the floor. If your machines only have USB, or you want to cover many machines at a lower cost per machine, look at CodeNet instead.
Capabilities
What’s built in
All of it is configured before the unit leaves us.
Named users, isolated files
Multiple accounts, each with its own file space, plus a separate administrator role. No shared drop folder that everyone in the building can read.
Encrypted transfer both ways
Uploads run over SFTP or HTTPS. Every connection is authenticated, so there is no anonymous access to the network side of the device.
Dangerous files rejected
Anything that could carry a threat is refused before it reaches the machine, closing the most common route for something harmful to arrive on the control.
Locked-down by default
A default-deny firewall and mandatory access control confine each service to only what it needs. Unused services are switched off rather than left listening.
Audit logging
File access and configuration changes are logged with timestamps and user attribution, and survive a reboot, so you have something to show an assessor.
Machine data forwarding
Bridge MTConnect and OPC‑UA from the machine to your office network for uptime monitoring and dashboards, without exposing the control itself.
Ethernet-type DNC drip feed
Run programs larger than the control’s memory by feeding them continuously, so long five-axis and mold programs are not a problem. This runs over Ethernet. RS-232 serial drip feed is not supported.
Works with no internet at all
Nothing on the device calls out to the internet. An onboard clock keeps time through power cycles, so fully air-gapped shops are properly supported.
Admin from a browser
Network settings, users, and firewall rules are managed from a web page that works even in the older browsers found on machine-side PCs. There is no command line to learn.
Physical reset
A button on the unit restores factory defaults and wipes user files, while preserving audit logs. Useful when a machine changes hands or leaves the building.
Industrial build
Fully enclosed aluminum housing with industrial-grade components, specified for years of service in a shop environment.
In practice
Three steps, then it’s just there.
-
Plug it in
Ethernet from the appliance to the machine, then Ethernet or Wi-Fi to your shop network. Enter your network details once through the browser admin page. That is the whole install.
-
Send the file
From any computer on your network, drag and drop into the browser over HTTPS, or connect with an SFTP client such as WinSCP or FileZilla. There is nothing to install on the sending computer.
-
Run the part
The program appears on the machine as a standard network file share, in the same place the operator already looks. There is no new screen and no change to the routine.
Compare
CodePod and CodeNet side by side
Both share the same security model. The difference is how they reach the machine and how many machines one unit covers.
| Capability | CodePod | CodeNet Server | CodeNet Receiver |
|---|---|---|---|
| Machines covered | 1 | Multiple, via receivers | 1 |
| Connection to machine | Ethernet | Via receivers | USB-A |
| Connection to your network | Ethernet or Wi-Fi | Ethernet or Wi-Fi, plus a private link to receivers | Private link to server |
| How you upload | SFTP or HTTPS browser | SFTP or HTTPS browser | Via the server |
| How the machine sees files | Network file share | — | USB flash drive |
| Encryption at rest | AES-256 full disk | AES-256 full disk | AES-256 full disk |
| Access protection | User login and password | User login and password | User login, plus the CNC’s own fingerprint |
| User accounts | Multiple, isolated | Multiple, isolated | Managed by the server |
| Admin interface | Browser-based | Browser-based, central | Managed by the server |
| MTConnect / OPC‑UA forwarding | Yes | No | No |
| Ethernet-type DNC drip feed | Yes | No | No |
| Needs its own power | Yes | Yes | No, powered by the machine |
Questions
Common questions
Do I need special software on my computer?
No. Any standard SFTP client or modern web browser works. There is nothing extra to install and no per-seat license to buy.
Does CodePod need an internet connection?
No. It runs entirely on your local network and makes no outbound connections of any kind. That is deliberate: it is what lets the device sit inside an air-gapped environment without becoming a new hole in it.
Can several people send files at the same time?
Yes. CodePod supports multiple user accounts, and several people can upload or download at once. Each account has its own file space.
What if my machine doesn’t have an Ethernet port?
Then CodeNet is the one to look at. Its receivers plug into the machine’s USB port and appear to the control as an ordinary flash drive. Tell us what you have and we will point you to the right one.
Will this work with my brand of machine?
If the control can read a standard network file share, then yes, regardless of age or manufacturer. That covers most controls with a working Ethernet port. Send us your machine list and we will confirm your specific models before you buy anything.
What does “beta” actually mean here?
It means the hardware and software are complete and working, but we are still hardening edge cases and finishing documentation ahead of full production in September 2026. Lead times are longer than they will be later.
Where a beta unit needs swapping for final production hardware, we cover that at no charge. What the swap covers is set out in writing with your quote.
What happens if it fails in the middle of a job?
The machine keeps running. CodePod delivers files to the control; it is not in the path of the program once the machine is cutting. A failed appliance means you cannot transfer new files until it is replaced. The part already running is unaffected.
Who do I contact for help?
Support goes to support@ironglaciertech.com or (385) 288-0738. You will be talking to someone who has run these machines, not a call script.
Get a quote for your machines.
Send your machine list, with makes, models, and how they connect, and we’ll come back with a recommendation and pricing.