Resources for connected device teams

Practical checklists and guides from our engineers, for teams building connected devices from prototype to fleet.

Checklists & guides

EU Cyber Resilience Act readiness

Key dates, scope, secure by design, updates, vulnerability handling, reporting and documentation under the CRA.

Secure default configuration, with no shared default passwords and a way to reset to the original state.
Security updates delivered over the air, signed and verified, with rollback protection.
Actively exploited vulnerability: early warning within 24 hours, notification within 72 hours, final report within 14 days after a fix is available.
CE marking under the CRA from 11 Dec 2027.

Plus 21 more checks across scope, updates, reporting and documentation.

OTA release readiness

Update architecture, signing, release gates, staged rollout, monitoring and recovery: what to have in place before a firmware update reaches your fleet.

Automatic rollback: a device that fails to boot the new version returns to the previous one by itself.
Separate signing keys for test and production builds, so a production device rejects a test build even if it is published by mistake.
Staged rollout: your own devices first, then a small share of the fleet, then everyone.
Boot health after the update: did devices boot, connect and run normally?

Plus 27 more checks across architecture, release gates, monitoring and recovery.