Uncover the risks in your device software before they cost you.
Custom Yocto Linux images, AWS IoT onboarding, and OTA updates for industrial devices. Fixed scope, fixed price, eight weeks — and everything we build is yours.
What we do
You build the application. We deliver the platform.
Your device ships for ten years and sits somewhere nobody wants to drive to. It still has to take a security patch without becoming a support ticket. Getting that right is a different job from building your product — it's the job we do.
Custom Yocto OS image
A hardened Linux built for your board — and nothing else.
- ✓Mostly read-only rootfs that shrugs off power cuts
- ✓Reproducible builds you can rerun bit-for-bit in ten years
- ✓Secure boot chain, with the signing keys held by you
AWS IoT onboarding
Every unit gets an identity; your fleet gets a home.
- ✓Per-device certificate identities, provisioned zero-touch
- ✓Device shadows and telemetry on AWS IoT Core
- ✓Buffered on-device, so offline gaps don't lose data
OTA update pipeline
Ship a security patch in year ten like it's week one.
- ✓Signed A/B updates with automatic rollback
- ✓Delta payloads for constrained links
- ✓SBOM plus CVE tracking behind every build
The engagement
Fixed scope. Fixed price. Eight weeks.
Most embedded platform work is sold by the hour. You carry the schedule risk and learn the cost afterwards. We scope it up front instead: one price, one date, one list of what lands on your board.
Weeks 1–2
1.Board bring-up & base image
A Yocto layer for your board, trimmed kernel, minimal rootfs — building reproducibly in CI.
Weeks 3–4
2.Secure boot & root of trust
A verified chain from power-on to userspace. The signing keys are generated and held by you.
Weeks 5–6
3.Updates & the patch pipeline
A/B updates with automatic rollback, delta payloads, and an SBOM with CVE tracking.
Weeks 7–8
4.AWS IoT onboarding & handover
Zero-touch provisioning, fleet onboarding, documentation, and a live handover to your team.
Why GatewayBoards
A partner, not a platform that owns you
Independent
No silicon-vendor agenda. We build on whatever board fits your application — or source and configure one for you.
You own it
Open-source foundations, your Git repo, your signing keys. No lock-in, no subscription, no per-device fees.
Engineers, not account managers
The person who scopes your project is the person who builds it. One accountable team, end to end.
FAQ
Frequently Asked Questions
That's the normal case. We're independent and not tied to any silicon vendor, so bring the board you've already committed to and we build on it. If you haven't chosen yet, we'll help you pick — and source and configure it for you if you'd rather not deal with that at all.
It's a fixed price, quoted after a free scoping call, because the honest answer depends on your board. A mature SoC with a maintained vendor BSP is a very different job from a bare part with a vendor kernel nobody has touched in three years. A short paid audit tells you which one you have before you commit to the build.
We find that out during the audit, not during week five. If a maintained BSP exists we harden and trim it. If it doesn't, bring-up is real work and we quote it as such — or we tell you the board is a bad bet and suggest one that isn't. Either way you hear it up front.
Tell us about your device
What board is it, what does it need to do, and where does it end up? The scoping call is free — you leave it knowing what the work is and what it costs.