Humanoids, drones, mobile robots, industrial arms
Attested robots
A certificate covers one software version. Your fleet ships a new one every month.
A robot is a computer that moves. Before it enters a warehouse, a hospital or a public road, its operator should know that it runs the approved software on genuine hardware. Fleets update over the air, swap parts and go offline, so that proof has to be renewed through the whole life of each unit.
Who this is for
- Robot makers, humanoids, mobile robots, drones, industrial arms
- Integrators, answering IEC 62443 tenders
- Fleet operators, in warehouses, hospitals and logistics
When trust has to be proved again
An over-the-air update landsThe measured boot chain changes; the fleet back end must expect the new values and reject the old ones. A part is replaced in the fieldA new board, camera or controller brings a new identity that must be enrolled before it is trusted.
A unit was offline or out of custodyIts last proof is stale. It should re-attest before it rejoins the fleet or receives missions.
A model on the robot is retrainedPerception and control models are software too, and belong in the measurements.
What we deliver
- A device identity and attestation design (TPM, DICE, secure elements) from factory to decommissioning.
- Fleet re-attestation: when units must prove themselves again, and what they may do until they have.
- A mapping to what your buyers put in tenders: IEC 62443 component requirements, the cybersecurity clause of ISO 10218:2025, the EU Machinery Regulation and the Cyber Resilience Act.
Questions worth answering
- Can your fleet server tell a unit with approved firmware from one that was opened?
- What happens to a robot that missed three updates?
- Is the robot's AI model part of what you attest?
Across the life cycle
DesignBuildMake or deployOperateUpdateRetire
The stage that decides here: update. Fleets update over the air and are repaired by hand. Both have to end with a new proof. See attestation in the product life cycle.
Rules and standards your buyers cite
IEC 62443EU Machinery RegulationCyber Resilience ActEU AI Act
Use case
Autonomous haul trucks at a mine
Go deeper
- How the platforms attest: TPM, DICE, Arm TrustZone and PSA
- Terms explained: Re-attestation, Measured boot, TPM, DICE, IEC 62443, Attestable computing, Provisioning and onboarding, Why small devices struggle to be trusted
- Read next: Attestable computing, A robot fleet takeover
Who builds in this area
From our public landscape: Figure AI, Agility Robotics, Apptronik, 1X, Boston Dynamics, ANYbotics, Skydio, Auterion, Wingtra, Waymo, Wayve, Sibros, PX4 Autopilot, Uptane.
Not quite your case? Road vehicles and heavy machines? Attested vehicles. Fixed plant equipment? Attested OT.
Working on Attested robots? A first call takes 30 minutes and commits you to nothing. Bring your product and the one question that worries you.
Next fixed date: EU Digital Identity Wallets are due in every member state on 24 December 2026, 42 days from now.
Concepts: Re-attestation · Continuous attestation · Remote attestation · IETF RATS architecture