Thistle Security Platform

Leverage Thistle’s security tools to protect your devices from exploits and bad actors so you can focus on building your killer features.

Platform Features

Firmware Update

Thistle’s OTA firmware/software update for embedded Linux and Zephyr RTOS. If your update fails, we ensure a fallback to the last stable state, offering a safe way to update your fleet with confidence.

Secure/Verified Boot

Thistle provides the tools and services that help enable secure/verified boot on supported hardware. Increase resilience on your devices, even without an included root-of-trust by leveraging Thistle’s support for Infineon’s OPTIGA Trust-M.

Developer-Supported Hardware:

  • Nvidia Jetson

  • Raspberry Pi

  • Beagle Bone Black

  • ESP-32

Control Center

Thistle’s all-in-one application for managing your devices:

  • Create and manage OTA releases

  • Create secure/verified boot bundles

  • Create and precisely manage device cohorts with tags

  • Monitor fleet health with Thistle’s data insights

Developer Tools

  • Thistle Update Client (TUC)

    • Thistle’s on-device agent is memory-safe, protecting your devices from update failures and bad actors

  • Thistle Release Helper (TRH)

    • Allows OTA updates to be published by human operators, or from CI /CD pipelines

    • Provides options to use Thistle-managed, Cloud KMS backed signing keys, or your own signing keys backed by a Yubi Key, Cloud KMS or a file on your computer

  • Thistle Yocto Build

    • Developer tooling to create secure-by-default device software

  • Thistle SDK

    • A collection of C bindings for security relevant Rust bindings