Option A
Build it yourself
Months of plumbing you'll own forever
- Broker, CA, time-series store, identity, monitoring, secure deployment
- Needs a specialized platform team
- You own the security posture for life
Connected-product platform
Devices managed, data flowing, updates delivered, compliance covered - while your team builds what your customers actually pay for.
The problem
Between "we have a device" and "we have a product" sits 6-12 months of undifferentiated infrastructure work. Today there are two bad ways to pay for it.
Option A
Months of plumbing you'll own forever
Option B
Fast start, expensive forever
The third path
Managed-platform convenience. Open-source control.
The portal
In your pocket
Operate the fleet from the portal or the OpenThings mobile app: device status, telemetry and alerts on the move.
Capabilities
All device traffic flows over a single surface: MQTT with mutual TLS. The broker is a manifest field - swap it without touching devices, certificates or topics.
Fleet inventory, lifecycle, firmware versions, grouping and tagging.
Ingest, validate, store and serve time-series; retention and dashboards.
Per-device mTLS identity with automated issuance and rotation.
Secure onboarding and provisioning for new devices.
Chunked delivery, signature verification before apply, rollback-ready.
Reliable device commands over the same authenticated channel.
Device and fleet condition alerts with Grafana dashboards built in.
Operate the fleet from the portal or the OpenThings mobile app.
Security & compliance
The EU Cyber Resilience Act puts real security obligations on connected products. OpenThings is built to meet them - already a buying requirement for some European customers, and a selling point for your product.
Every device gets its own certificate, issued and rotated automatically by the platform PKI. No manual key handling.
Integrity and signature verification before apply; rollback-ready OTA. Updates that cannot be tampered with.
Each tenant gets its own network, database, broker, TLS and egress allow-list. Operators authenticate via Keycloak; devices never touch the identity provider.
Unique device identity, secure update and isolation - the CRA checklist, covered by design.
Pricing & partnership
Self-hosted
€ 0
forever · AGPL-3.0
MVP · Managed
€ 50 /mo
up to 10 devices · cancel anytime
Managed by Rebels
from € 500 /mo
we host, operate and support
No clash with open source: self-hosting is free at any scale. Payment buys operations and guarantees - never the software itself.
We're early and building fast. Pilot deployments and design-partner slots are open now - early enough that what you need shapes what we build.