ls -la ./blog/
Blog
Notes on IoT fleets, telemetry pipelines, cloud infrastructure and applied AI, written from the engineering side by Bartosz Szczepanik.
# 3 posts · newest first
What CRA compliance actually takes for a small hardware team
I turned every Cyber Resilience Act obligation for device makers into one checklist. What it asks of a connected product, and what I would do first.
One golden certificate for the whole production line
Give every device its own X.509 identity in AWS IoT Core without flashing certificates unit by unit, using a shared claim certificate and fleet provisioning.
The CRA clock is already running on devices you shipped years ago
Since 11 September 2026 the CRA's 24-hour reporting duty covers every connected product on the EU market, old ones too. What it means for a small hardware team.
tail -f ./blog — more posts soon