Back to News
May 15, 202613 min read

Kepware vs Matrikon: Which OPC Server Is Right for Your Plant? (2026 Comparison)

If you are scoping an OPC server for a new plant, a brownfield modernization, or a SCADA upgrade in Singapore or Vietnam, two names come up almost every time: Kepware KEPServerEX (PTC) and MatrikonOPC (Honeywell). Both are mature, both are OPC Foundation certified, and both have been deployed in thousands of Southeast Asian facilities. They are not, however, interchangeable.

This guide compares Kepware vs Matrikon across the dimensions that actually matter when you have to write a purchase order: driver coverage, OPC UA maturity, security posture, redundancy, licensing model, and total cost of ownership. We sell Kepware — we are an authorized PTC distributor — but we have integrated against MatrikonOPC servers on enough projects to give you an honest read. If you only have two minutes: skip to the summary table.

The short answer

  • Pick Kepware (KEPServerEX) if your plant has a mixed-vendor PLC fleet (Siemens + Allen-Bradley + Mitsubishi + Modbus), if you want the broadest SCADA / historian / MES compatibility, or if you need a strong third-party ecosystem in Singapore, Malaysia, and Vietnam.
  • Pick MatrikonOPC (now part of Honeywell’s HCE portfolio) if your plant is predominantly Honeywell Experion / TDC 3000 / TPS, or if you are standardising on Honeywell control systems for oil & gas upstream and midstream.
  • For everything else — discrete manufacturing, food & beverage, semiconductor, electronics, water/wastewater, building automation — KEPServerEX is the safer default.

Now the long version, with the trade-offs that matter when you sit down to size a deployment.

1. Company background and product positioning

Kepware Technologies was founded in 1995 and acquired by PTC in 2016. KEPServerEX is its flagship platform; ThingWorx Kepware Edge is its Linux/edge variant. Kepware is marketed as a vendor-neutral, multi-protocol OPC server — that is, it is designed to connect to anyone’s control hardware and serve anyone’s applications.

Matrikon was founded in 1988 in Edmonton, Canada, and acquired by Honeywell in 2010. MatrikonOPC is now part of Honeywell’s Connected Enterprise / Honeywell Forge portfolio. While Matrikon historically positioned itself as vendor-neutral, in practice the product investment over the last decade has tracked Honeywell’s priorities: deep integration with Experion PKS, Honeywell SCADA, and Honeywell DCS systems, and strong OPC UA bridging for oil & gas and process industries.

This matters because OPC server roadmaps reflect their parent company’s incentives. PTC is an industrial software company — its incentive is to make Kepware compatible with as many devices and applications as possible. Honeywell is a control-systems company — its incentive is to make Matrikon excellent on Honeywell-centric architectures.

2. Driver coverage and protocol support

This is where the gap is most visible.

KEPServerEX publishes a driver catalogue of more than 150 protocols, covering virtually every PLC family in volume production today — Allen-Bradley ControlLogix, CompactLogix, PLC-5, SLC 500, MicroLogix; Siemens S7-300/400, S7-1200, S7-1500; Mitsubishi MELSEC Q, FX, iQ-R; Omron FINS and EtherNet/IP; Schneider Modicon; GE Series 90 and PACSystems; ABB AC500; Beckhoff TwinCAT; Yokogawa; and the open protocols (Modbus TCP/RTU, BACnet/IP, DNP3, IEC 60870-5-104, IEC 61850, OPC UA Client, MTConnect).

MatrikonOPC publishes a narrower driver portfolio. The strongest coverage is Honeywell (Experion PKS, TDC 3000, TPS, Plantscape, ControlEdge), OSIsoft PI integration, Yokogawa Centum, ABB DCS bridging, and the standard open protocols (Modbus, OPC UA, OPC Classic tunneling). For a non-Honeywell discrete plant — say, a Singapore electronics factory with Allen-Bradley and Mitsubishi PLCs — MatrikonOPC is solvable but requires more individual drivers stitched together than KEPServerEX.

Verdict on drivers: Kepware wins for breadth. Matrikon wins for depth on Honeywell-centric process automation.

3. OPC UA support and security

Both platforms are OPC UA compliant and both can expose OPC DA Classic for legacy clients. The differences are practical rather than architectural:

  • Certificate management. KEPServerEX has a built-in OPC UA Configuration Manager that handles X.509 certificate trust, rotation, and revocation through a GUI. MatrikonOPC handles certificates through its own tooling; in our experience the workflow assumes a Honeywell-centric PKI, which is fine if you have one and friction if you don’t.
  • Encryption and signing. Both support Sign & Encrypt with Basic256Sha256 and Aes256_Sha256_RsaPss. For new Southeast Asia deployments, both meet the relevant IMDA and IEC 62443 baseline requirements provided they are configured correctly — both will happily ship with anonymous user policies enabled if you don’t tighten them.
  • Reverse-connect / tunneling. If you need to tunnel OPC across a DMZ or a firewall boundary, both can do it, but the dominant pattern for Kepware deployments is to pair it with OPSWAT NetWall USG (data diode) rather than rely on application-layer tunneling. MatrikonOPC has historically pushed its own Data Manager / OPC Tunneller product for this use case.

For OT cybersecurity in regulated sectors — pharmaceuticals in Singapore, electronics in Penang, food & beverage in Vietnam — we recommend treating the OPC server as one layer in a defence-in-depth stack rather than the security boundary itself. See our OPSWAT OTfuse and MetaAccess OT pages for the recommended companion stack.

4. SCADA, historian, and MES compatibility

This is the dimension most architects underweight when comparing OPC servers, and it is often the deciding factor.

KEPServerEX is certified against essentially every major SCADA and historian product in the Southeast Asia market: AVEVA InTouch and System Platform, Inductive Automation Ignition, Siemens WinCC, Rockwell FactoryTalk View SE, GE / PTC Proficy HMI/SCADA and Proficy Historian, Iconics Genesis64, Citect SCADA, and OSIsoft PI. If you are running Proficy Plant Applications for MES or WIN-911 for alarm distribution, Kepware is the recommended data layer.

MatrikonOPC works best with Honeywell-stack applications: Honeywell Forge, Experion PKS clients, Uniformance PHD historian. It can talk to third-party SCADA via OPC UA, but the “certified reference architecture” is shorter than Kepware’s.

5. Redundancy and high availability

Any 24/7 plant should run its OPC server in a redundant pair. Both vendors support this:

  • Kepware offers the Media Level Redundancy plug-in: a hot-standby pair with automatic failover, sub-second switchover for most drivers, and shared certificate trust stores. Pairs cleanly with Stratus everRun or Stratus ftServer hardware for fault-tolerant operation.
  • MatrikonOPC offers OPC Redundancy Broker (ORB), which is technically a separate product layered in front of one or more OPC servers (Matrikon’s or others’). It is mature and flexible, but the licensing adds a line item.

Verdict: functionally close. Kepware’s redundancy is simpler to configure for new teams; Matrikon’s is more flexible if you are aggregating multiple existing OPC servers.

6. Licensing model and pricing

Both platforms are licensed perpetually with optional annual maintenance. Neither vendor publishes list prices, and both depend heavily on which drivers and add-ons you select.

Kepware is licensed by driver suite (Manufacturing Suite, Process Suite, Building Automation Suite, etc.) plus optional plug-ins: IoT Gateway (MQTT, REST, AWS, Azure), DataLogger (SQL Server, Oracle, MySQL), Advanced Tags, Media Level Redundancy, Security Policies. Bundling drivers into a suite is significantly cheaper than buying them individually.

MatrikonOPC is licensed per server instance plus per-protocol drivers, with Honeywell-bundled licensing available when buying Experion PKS systems. If you are buying a Honeywell control system anyway, MatrikonOPC licensing can be folded into the larger deal — this is often where Matrikon wins on price.

For a current quotation for Singapore, Malaysia, or Vietnam, please contact our team. We do not publish price lists for Kepware because the real sized number varies by an order of magnitude with driver mix and add-on selection.

7. Ecosystem and local support in Southeast Asia

This is the dimension international comparison articles usually miss, and it is the one that determines how quickly you recover from a 3 AM production outage.

Kepware in Singapore and Vietnam: Allied Solutions Global is an authorized PTC / Kepware distributor with offices in Singapore, Kuala Lumpur, Penang, and Ho Chi Minh City. Our engineers configure, deploy, and support KEPServerEX in production across all four offices, and we run regular Kepware workshops (most recently the Kepware Workshop Malaysia 2024 and the Kepware Singapore Seminar 2023). System integrators across the region are familiar with the product, which keeps integration costs predictable.

Matrikon in Singapore and Vietnam: support is typically channelled through Honeywell Process Solutions partners and through Honeywell’s regional offices. If your plant is already a Honeywell account, this works well. If it is not, you may find yourself routed through generic Honeywell support rather than an OPC specialist.

Summary table: Kepware vs Matrikon at a glance

Dimension KEPServerEX (Kepware / PTC) MatrikonOPC (Honeywell)
Parent company PTC (since 2016) Honeywell (since 2010)
Driver count 150+ protocols Narrower; deepest on Honeywell
Best fit Multi-vendor discrete & process plants Honeywell-centric process plants
OPC UA support Full, with GUI cert manager Full, Honeywell-aligned tooling
SCADA certification breadth Industry’s widest Strongest with Honeywell stack
Redundancy Media Level Redundancy plug-in OPC Redundancy Broker (separate)
Cloud / MQTT IoT Gateway plug-in (mature) Available via Honeywell Forge
Linux / edge ThingWorx Kepware Edge Limited; primarily Windows
Local SEA support Allied Solutions (SG, KL, Penang, HCMC) Via Honeywell channel
Pricing model Per driver suite + plug-ins Per server + drivers

Singapore-specific considerations

Singapore’s manufacturing base is mixed-vendor by nature: electronics and semiconductor plants run Allen-Bradley and Siemens; pharmaceutical plants run a mix of Rockwell and Siemens; F&B and oleochemical plants often have legacy Yokogawa, Mitsubishi, and Modbus. For that profile, KEPServerEX is almost always the right answer — it covers all the protocols in one server and integrates with the SCADA and historian products already in use on the island.

For Kepware procurement in Singapore, our headquarters is at 23 New Industrial Road #07-06/07, Solstice Business Center, Singapore 536209. Direct line: +65 6484 4050. See the Singapore office page for a meeting request.

Vietnam-specific considerations

Vietnam’s manufacturing landscape has grown enormously over the last decade, and most new plants — particularly in Ho Chi Minh City, Bình Dương (now part of HCMC after the 2026 provincial merger), Bắc Ninh, and Long An — are built with a mix of Siemens, Mitsubishi, Allen-Bradley, and Omron PLCs. The same answer applies: for a Vietnamese discrete or food & beverage manufacturer, KEPServerEX is the safer default. Honeywell-centric process plants (refining, petrochemicals) may want to evaluate Matrikon as a second option.

For Kepware procurement in Vietnam, our Ho Chi Minh City office is in Binh Hoa Neighborhood, Lai Thieu Ward. Direct line: +84 368888036. See the Ho Chi Minh City office page to request a project consultation in Vietnamese or English. We also maintain a Vietnamese-language version of our Kepware product page for technical reference.

Migration: switching from Matrikon to Kepware (or vice versa)

Existing plants do sometimes change OPC servers — usually during a SCADA refresh or a Windows Server upgrade that forces a software re-evaluation. The migration is mechanical rather than risky:

  1. Export the tag database from the current server (both Kepware and Matrikon support CSV export).
  2. Map drivers — for example, MatrikonOPC for Allen-Bradley → Kepware Allen-Bradley ControlLogix Ethernet driver.
  3. Re-issue OPC UA certificates on the new server and update client trust lists.
  4. Run both servers in parallel during commissioning, ideally for a full production cycle.
  5. Cut over the SCADA / historian / MES clients one application at a time, never all at once.

For mission-critical 24/7 plants, run the migration under a maintenance window with a documented rollback plan. We have done this for several Southeast Asia clients and can scope the migration time and risk if you share your current tag count and driver list.

Frequently asked questions

Is Matrikon better than Kepware for oil & gas?

For Honeywell-controlled upstream and midstream installations, Matrikon has a clear home-field advantage — it understands Experion PKS, Honeywell DCS, and the SCADA reference architectures Honeywell ships. For non-Honeywell oil & gas (Yokogawa, Emerson DeltaV, ABB DCS), the advantage shrinks and Kepware becomes competitive again.

Can Kepware and Matrikon coexist?

Yes. It is common to run MatrikonOPC on a Honeywell DCS-adjacent server and KEPServerEX as the multi-vendor aggregator that bridges to SCADA, historian, and MES. The two can talk to each other via OPC UA.

Which has better cybersecurity?

Out of the box, neither is “secure” — both ship with permissive defaults and require hardening. Both support OPC UA Sign & Encrypt with modern cipher suites. In practice, the security depends on how you configure the server, not which vendor’s badge is on the box. See our notes on OPSWAT OTfuse for the recommended companion network-security layer.

Does Kepware run on Linux?

The flagship KEPServerEX is Windows-only. ThingWorx Kepware Edge is the Linux/edge variant with a subset of the driver portfolio. MatrikonOPC is also primarily Windows; Honeywell Forge has its own Linux story but that is not strictly the Matrikon product.

What about MQTT and cloud integration?

Kepware’s IoT Gateway plug-in publishes tags to MQTT brokers (Sparkplug B, AWS IoT, Azure IoT Hub, self-hosted Mosquitto), Kafka, and REST endpoints. This is the most common pattern for getting Southeast Asian plant-floor data into cloud analytics. Matrikon’s cloud story today routes through Honeywell Forge.

Is the Kepware vs Matrikon decision reversible?

Yes — both export tag databases and both speak OPC UA, so changing your mind in three years is mechanical, not catastrophic. The bigger cost is the SCADA / historian / MES integration work, which is largely vendor-neutral once OPC UA is the contract between them.

How to decide for your plant

If you want a defensible, project-ready answer, here is the checklist we use when scoping for clients in Singapore and Vietnam:

  1. List your PLC vendors and models. If >50% are Honeywell, evaluate Matrikon first. Otherwise default to Kepware.
  2. List your SCADA, historian, MES. Confirm certified-compatibility against both candidates. Almost everything modern certifies against Kepware; Honeywell-stack apps prefer Matrikon.
  3. Decide your cloud / IIoT roadmap. MQTT to AWS or Azure → Kepware. Honeywell Forge → Matrikon.
  4. Define your redundancy requirements. 24/7 plant → both vendors fine, but Kepware’s MLR is simpler to operate for non-Honeywell teams.
  5. Get a sized quotation. For Kepware in Singapore, Malaysia, or Vietnam, contact us with your device list and we will return a Suite recommendation within one business day.

Next steps

If you want a deeper introduction to KEPServerEX itself, see our pillar guide: What is Kepware? A Complete Guide to KEPServerEX. To request a sized quotation for your plant in Singapore, Malaysia, or Vietnam, contact the team:

Allied Solutions Global is an authorized Kepware (PTC) distributor across Southeast Asia. KEPServerEX is a registered trademark of PTC Inc. MatrikonOPC is a registered trademark of Honeywell International Inc. This comparison reflects the authors’ field experience integrating both platforms; we are not affiliated with Honeywell.

Kepware vs Matrikon: Which OPC Server Is Right for Your Plant? (2026 Comparison) | Allied Solutions Global