Tridium: Building system integration through Niagara software and JACE controllers

Overview

Niagara Framework is Tridium's integration software for connecting devices and operational systems into a shared environment. It provides the platform on which controllers, supervisory applications and partner products are built. Niagara is therefore a software ecosystem as well as a set of Tridium-branded hardware products.

The Niagara Supervisor illustrates the supervisory layer: it combines information from JACE controllers and other devices, with browser graphics, alarms, histories, scheduling and enterprise integration. For a building owner, this creates a common operating view across equipment supplied by different manufacturers. For an integrator, it provides one engineering environment for organising points and building the required application.

Offering

The JACE controller range hosts Niagara close to field equipment. Tridium's current page presents JACE 9000 for Niagara 4.13 and later, alongside documentation for JACE 8000 and IO R expansion. IO R adds physical inputs and outputs, so a project can combine software integration with direct connections to suitable sensors and actuators.

Niagara Edge 10 is a separate compact controller offering, while Niagara Supervisor provides server-level functions above the field estate. Keeping those roles distinct helps a designer decide where control logic, data collection and long-term histories belong. The controller and supervisor are complementary parts of a system rather than identical devices in different enclosures.

Technology

Tridium's developer resources support building modules and extensions for Niagara. Its Portability SDK allows approved partners to deploy the framework on their own hardware, extending the platform beyond Tridium's JACE range. This explains why Niagara-based products can have different physical interfaces and additional manufacturer-specific software.

The platform's protocol and driver ecosystem does not mean every licensed installation has identical capabilities. Driver availability, device limits and module versions must be checked for the actual station. Tridium's product-security resources provide a separate route for reviewing advisories and maintaining the software estate.

The Niagara 4.14 features overview from 2024 shows the breadth of the driver library: BACnet, Modbus, LonWorks, M-Bus over serial and TCP/IP, OPC UA, MQTT and an HTTP client sit in the same driver manager, and histories can be exported to MySQL, Microsoft SQL Server or Oracle databases or to CSV. Tagging supports Project Haystack and, from 4.14, a Brick Schema dictionary. Release 4.14 also added SAML authentication options, a certificate signing service for station PKI and a multi-tier security dashboard. BACnet support is tested independently: BTL listing 31446 records Niagara Edge 10 as a BACnet building controller, router, gateway and broadcast management device at protocol revision 16, tested in November 2025 with BACnet/SC hub and MS/TP support.

Security has a public record too. CISA advisory ICSA-18-191-03, first posted in July 2018, covered a path traversal flaw and an authentication bypass in Niagara AX 3.8 and Niagara 4.4 on Windows. In July 2025 Nozomi Networks Labs reported 13 vulnerabilities in Niagara Framework, six rated CVSS 9.8, which are fully exploitable when a station is misconfigured with encryption disabled. The Hacker News lists fixes in 4.14.2u2, 4.15u1 and 4.10u11, and Facilities Dive reports Tridium's advice to patch, review authorised users and follow its hardening guide. Tridium's development lifecycle holds an ISASecure SDLA certificate against IEC 62443-4-1, issued by exida in January 2024 and valid until February 2027; it certifies the process, not each release.

Markets

Niagara Supervisor combines centralised logging, alarms, schedules and graphics for a network of controllers. Those functions are useful across a campus or a portfolio of buildings, where an operator needs to compare conditions and investigate faults without treating every controller as an isolated screen. Tag-based graphics and analytics support repeatable engineering across that estate.

The Niagara Cloud Suite adds services alongside the deployed Niagara systems. Tridium presents separate offerings for data, recovery and remote access, rather than one mandatory replacement for local control. A buyer can therefore distinguish the on-site automation architecture from additional services used to support data access, maintenance or recovery across multiple locations.

Company

Tridium's history describes a functional prototype in 1997 and the launch of Niagara Framework in 1999. Tridium’s Niagara Summit history timeline dates company founding to 1995, separately from the 1999 Niagara launch. The same history records Honeywell's acquisition in 2005 and describes Tridium as an independent business entity within Honeywell International.

The company gives its headquarters as Richmond, Virginia, with offices in other regions. Its commercial model includes systems integrators, developers and manufacturers building on Niagara. The Powered by Niagara programme is a concrete example: partner hardware can use the framework through Tridium's portability approach, while the partner contributes its own hardware and application offering.

Tridium's own history traces the growth of the installed base: Niagara passed 100,000 instances in 2008, 500,000 in 2016 and 1,000,000 in 2021. Niagara 4 and the JACE 8000 launched in 2015, Niagara Edge 10 in 2018 and JACE 9000 in 2023. Product security is handled by a response team that takes encrypted reports and follows coordinated vulnerability disclosure, as set out on its product security page.