One certified core. Two runtimes. A renewable lease.
Flex Gateway is a layered platform: the core carries identity, radios, and security; carriers carry I/O; the runtime carries intelligence; and Licenvera carries entitlement and fleet operations. One contract binds them all.
Three independent axes
Cost floor — core + carrier
A single RF- and security-certified core module (SiWx917, MG24 Zigbee, ATECC608B, secure boot) reused across every build. Snap it onto a minimal Lite carrier or a full industrial/enterprise carrier. Certify the radios once; the carrier is just a baseboard.
Compute brain — two runtimes
An MCU runtime (SiWx917 as host) for Lite, Audio, and Industrial builds; a Linux runtime (application-class SoC) for enterprise edge historian, OPC-UA, containers, and analytics. Both implement one capability model, one pipeline, and one cloud protocol.
Entitlement — identity + lease
An immutable factory birth certificate binds identity and present hardware to the secure element. A renewable Licenvera lease carries tier, features, and expiry — cached on the device and refreshed. Upgrade or revoke over the air, with no re-flash.
Protocol stack
Field devices in, enterprise systems out — with device profiles supplying the semantics.
| Plane | Protocols | Tier | Purpose |
|---|---|---|---|
| Southbound | Zigbee, BLE, Modbus RTU, BACnet MS/TP | All / Industrial | Field sensors and controllers |
| Northbound | MQTT, Sparkplug B, HTTPS | All | Edge-to-cloud with birth/death + store-and-forward |
| Northbound | OPC-UA (client) | Linux | SCADA / Industry-4.0 integration |
| WAN | Wi-Fi, Ethernet / PoE, external cellular | Industrial+ | Managed wired ↔ cellular failover |
| Control | Licenvera entitlement + fleet API | All | Lease refresh, config, OTA, health/SLO |
Built to pass the IT review
A customer's security review — not the sales call — is where most gateways die. Flex Gateway is designed to clear it.
Device trust
- Secure boot, root of trust in ROM
- ATECC608B attestation & key custody
- Data-at-rest encryption
Network posture
- 802.1X / NAC admission
- Outbound-only + HTTP(S) proxy
- TLS certificate pinning
Compliance track
- ETSI EN 303 645 baseline
- EU CRA · US Cyber Trust Mark
- SBOM + committed updates
Use cases
Retail chains
Zigbee/BLE sensing with local rules, fleet health, dead-device alerts, and audio alerting.
Cold-chain & pharma
Local-first alarms, fail-open entitlement, authenticated time, and audit-ready data integrity.
Facilities & HVAC
BACnet MS/TP and Modbus RTU with rule-driven local outputs and relays.
Healthcare / nurse-call
Safety alerts that keep working when the network — and the license server — are down.
Industrial edge
Linux-tier historian, OPC-UA, and analytics on the same identity and cloud contract.
OEM / white-label
License the certified core module and build your own carrier and product.
Let's map your deployment to a build
Share your protocols, scale, and constraints — we'll come back with a recommended configuration.
Contact us