AI Agents Can Run Real Test Hardware Now. The Hard Part Is the Lab Underneath. AI agents are the thing right now: give one a goal and it acts on its own, calling tools and writing code to get there. … Read More
Shaping Security for Embedded Systems
The Industrial Grade Linux Operating System (IGLOS) is
the best Linux distribution for Embedded Systems, designed for full compliance with the Cyber Resilience Act, NIS-2 and IEC 62443.
What we offer
Open Source Tailored for You
IGLOS is built on Debian and the upstream Linux kernel, the same foundation many teams already work with. What changes with IGLOS is what sits on top:
Compliance
With our IEC 62443-4-2 certificate and extensive compliance documentation, IGLOS is ready for the CRA and NIS-2. We guide you towards audit-ready documentation, process evidences and SBOMs!
Tailored patching
CVE scanners flood you with raw findings. We prioritize the vulnerabilities that truly matter in your environment and remediate them without sacrificing stability or performance.
Accountability
A partner you can trust when it matters most, with deep expertise in resolving critical issues such as Spectre and Meltdown.
Continuity
Linutronix has maintained embedded Linux in industrial environments for over two decades - a track record independent of any maintainer's availability.
Time back for your team
IGLOS lets your engineers spend time generating value for your customers.
IGLOS Features
Security built in at every layer, from power-on to end of life.
- Secure boot, mandatory access control, and hardened system configuration by default
- Audit logging and defense-in-depth architecture for mission-critical environments
- Over-the-air updates for the entire device lifecycle
Our Services
We support you through every phase of embedded system development.
- Bootstrapping and migration of your existing product to IGLOS
- Compliance consulting, from gap analysis to certification evidence
- Kernel-level development and debugging — the Linux kernel is our specialty
Hardware
IGLOS runs on a wide range of industrial platforms, from ARM-based devices to Intel systems to RISC-V
- Choose from our network of trusted hardware partners
- Or bring your own board — we handle the integration
- Custom bring-up and board support where needed
About us
- Upstream first. We develop in the open and contribute our work back to the mainline kernel — no forks, no dead ends.
- FOSS ambassadors. Linutronix engineers have shaped core Linux technologies for decades, including Preempt-RT, the real-time foundation of the mainline kernel.
- Sustainable collaboration. We build long-term partnerships, not one-off projects — because embedded products live for ten years or more.
- Engineering excellence. From kernel internals to certification evidence, we hold every layer of our work to the same standard.
FAQ
Frequently asked questions
What is IGLOS?
IGLOS (Industrial Grade Linux Operating System) is a Debian-based embedded Linux platform developed by Linutronix and certified to IEC 62443-4-1/4-2 Security Level 2 — the first Linux platform to achieve this. It is designed for devices that must comply with the EU Cyber Resilience Act and NIS-2 across their full lifecycle.
How does IGLOS help with CRA compliance?
The CRA requires manufacturers to demonstrate secure development processes, vulnerability handling, and update capability for the lifetime of a device. IGLOS covers the operating-system share of these obligations out of the box: certified development processes assessed by TÜV SÜD, continuous CVE tracking and patching, and integrated OTA updates. You inherit a compliant foundation instead of building one.
What does the IEC 62443 SL2 certification actually cover?
Security Level 2 addresses intentional attacks using simple means, low resources, and generic skills — the de facto baseline for industrial automation and control system components. Our certification covers both the secure development lifecycle (62443-4-1) and the technical security requirements of the platform itself (62443-4-2), verified and continuously monitored by TÜV SÜD.
How is IGLOS different from Yocto builds or generic Debian?
Three things. First, the certification: with a self-built distribution, the compliance burden is entirely yours. Second, maintenance: IGLOS includes long-term kernel maintenance with security patches for the lifetime of your product. Third, it keeps the strengths of a binary package-based distribution — multi-platform support, mature tooling, CVE tracking — while remaining optimized for small footprint and fast boot.
Can we migrate an existing product to IGLOS?
Yes, existing applications typically port with minimal friction. We support the migration, from initial bootstrapping through compliance consulting to long-term support.
Will IGLOS help us get our own product certified?
Yes while a certified OS platform doesn’t automatically certify your device, it substantially reduces the scope of your own assessment. We provide the documentation, evidence, and guidance your certification body will ask for, drawing on our own experience going through the process.
News
News & Articles
External Component Management: Open Source or Proprietary Software
External Components Management: Open Source or Proprietary Software? During Embedded World 26 we shared how Linutronix uses Open Source Software for regulated industries at our booth and at the conference as summarized in this blog post. (Download the presentation here) So why … Read More
Meet IGLOS at embedded world 2026 in Nuremberg
Meet IGLOS at embedded world 2026 in Nuremberg The year 2026 marks a crucial phase for manufacturers preparing for the requirements of the Cyber Resilience Act (CRA). As regulatory obligations become operational reality, embedded device vendors must ensure their products … Read More