Updates and security

Managed updates

Control 7 receives firmware through a centrally managed update channel. The production channel is the default. Diagnostic and developer releases are assigned only to designated devices.

Version and integrity are checked before installation. An update cannot silently downgrade to an unauthorized older release. If new firmware does not start reliably, the device can return to the previously working version.

No new energy control commands are generated while an update is in progress. The display shows progress and outcome.

Local sign-in

Use a unique and strong administrator password.
Do not share session links or diagnostic access.
Do not expose Control 7 through an unverified internet port forwarding rule.
Keep the router and connected energy products up to date.

Diagnostics and remote support

Remote diagnostics are bounded by default. When explicitly enabled, only normalized and limited system and capability information is transferred. Passwords, tokens, Wi-Fi credentials, raw logs and vendor-specific registers are not part of normal diagnostic transfer.

System boundaries

GridFusion does not replace fuses, grid protection, inverter protection or the battery-management system. Vendor limits and local electrical protection always take priority. Unsafe or stale meter data results in a safe state without a new battery action.