The Challenge — a compromised update channel is an existential risk
The client ships firmware to a large fleet of connected field tablets across six product lines. When their existing update infrastructure was compromised, every device in the field became a potential entry point — with no safe, fast way to push a fix and zero visibility into the fleet.
We needed the update system rebuilt from the ground up — secure by default, always available, and fast enough to close a vulnerability the same day we find it.
The Solution — a secure, serverless OTA platform engineered to disappear into the background
Stratto rebuilt the update system from the ground up on AWS: signed firmware in hardened, encrypted object storage, delivered through a global CDN with resumable multipart downloads, orchestrated by event-driven serverless functions, and governed by a real-time operations console with enterprise SSO, MFA, role-based access, and a full audit trail.
How the platform works
The Results — secure, observable, and running in production
The platform now serves the client's global fleet with real-time visibility and a security posture the old system never had.
| Metric | Result |
|---|---|
| Download success rate (30-day, large firmware over intermittent links) | 90.6% |
| Platform uptime since launch | 99.99% |
| Update checks handled per month (+17% MoM) | 486K |
| Delivery error rate on served packages | 0% |
| Cumulative device update sessions served to date | 8.5M+ |
| Firmware downloads per month | 47K |
| Product lines managed from one console | 6 |
| Actions captured in a tamper-evident audit log | 100% |
What Makes It Different — built secure, reliable, and zero-ops from day one
Every capability serves one goal: let the client close a vulnerability the same day they find it — safely, across the entire fleet, with complete confidence in what happened.
A platform this size — secure delivery, a real-time console, SSO/MFA/RBAC, and millions of update sessions — shipped from design to production in roughly 10 weeks. That pace comes from Stratto's disciplined AI-assisted engineering methodology: persistent context, planned execution, and specialized agents that keep production code secure and standards-compliant instead of "vibe-coded."
Explore the methodologyTechnology — a modern, cloud-native stack
Client identity anonymized at the customer's request. All performance figures are drawn from live production telemetry of the deployed platform. Representative product/device identifiers shown in visuals do not reflect the client's actual model names.