iThing AB · Product security platform
Controlled over-the-air firmware delivery for embedded products.
Build artifacts are produced in CI, signed by an external signing authority and released from here — never straight from a source repository. Each device only ever receives firmware built for its own product, hardware revision and release channel.
Signed firmware only
Production devices receive approved, Secure Boot signed images. Unsigned builds are blocked by default.
Authenticated devices
Devices identify themselves with a client certificate; firmware is never downloadable without authorization.
Per customer and revision
Customers, products, hardware revisions and release channels are kept strictly apart in the backend.
Full traceability
Every release links build, commit, SBOM, checksum, signing authority, approval and install outcome.
Release pipeline
GitHub -> CI build -> unsigned artifact -> signing authority
-> signed firmware -> iThing OTA Server -> authenticated devices