Another OS? Sure but 
this one won’t bother you next Tuesday.

Uncompromising Security.
Unprecedented Scalability.

Gapfruit provides an OS that empowers critical infrastructures with unmatched resilience, long-term maintainability, and minimal total cost of operation.

Our partner COMMITS
Security is build with code AND trust with action.
what our partners do.

Interview with Stefan Schweiger (Business Manager AIoT Solutions bei Bechtle AG)

Stefan Schweiger shares his perspective on the future of secure and scalable IoT infrastructures and the strategic value of partnering with Gapfruit.

Read More
Stefan Schweiger
Business Manager AIoT Solutions

Miromico has developed an industrial-grade LoRaWAN gateway empowered by Gapfruit OS.

The product was designed to meet the upcoming Cyber Resilience Act (CRA), delivering robust security and full device lifecycle management.

Read More
Alexander Raimondi
CTO

S.I.E. develops an industrial-grade Edge gateway empowered by Gapfruit OS.

The hardware is tailored to enable Bechtle’s managed services supporting CRA compliance, and ensuring secure, scalable, long-term operation for critical environments.

Read More
Josef Krojer
CEO

Device Insight explores how Gapfruit OS strengthens OT security in industrial IoT environments.

In a blog post Device Insight outlines key challenges in protecting OT infrastructures and explains how the collaboration with Gapfruit lays the foundation for industrial IoT solutions.

Read More
Thomas Stammeier
CTO

Congatec delivers System on Modules (SOMs) with Gapfruit OS for secure edge gateways.

Congatec supplies SOMs to S.I.E for building Bechtle’s secure edge gateway with Gapfruit OS to support security, scalability, robustness and long-term managed infrastructures.

Read More
Marcus Strobl
Business Development Manager

But let’s not trust words
Here are facts

Gapfruit OS is in operation and used in large-scale industrial edge and LoRaWAN gateway deployments.

Security

By reducing the attack surface by more than 99%, Gapfruit OS turns reactive security into proactive cybersecurity — built on microkernel architecture and capability-based isolation.

In 2023, Gapfruit OS was demonstrated live in front of security researchers at a major U.S. conference.

Scalability

Gapfruit OS maps the entire physical device including its full software stack - into a digital twin, enabling operators to scale large device fleets without increasing operational effort or cost.

In an industrial gateway PoC, rollout time dropped from 2 hours to just 90 seconds while maintaining full auditability across the fleet.

Availability

Gapfruit OS features self-healing resilience that automatically detects and recovers from faults — without interrupting critical functions.

In a robotics PoC, a network driver fault was resolved in under 300 ms, with zero downtime and no operational interruption.

Maintainability

Gapfruit OS enables declarative, downtime-free, over-the-air updates — keeping both the OS and applications reliably up to date.

Engineered and tested for long-lifecycle deployments of 10+ years without requiring manual intervention.

No Layers of hype
Just layers of isolation

Gapfruit OS is built on a microkernel architecture with capability-based security at every layer.

It enforces strict isolation minimizes the attack surface, and gives full control over software and hardware interactions.

With “capabilities all the way down,” trust is rooted in hardware and extends to applications and the cloud

Zero-trust architectures, supports high availability and certification  that makes trust provable by design

Why Traditional OS’ Keep Failing and
What We Did about it

Security

Monolithic architectures have massive attack surfaces and expose over 300 syscalls and unnecessary services.

Strong isolation
Full control over all dependencies
No shared memory or global privileges
Proven to reduce attack surface by 99%
Our solution //////////

Sсalability

Scaling with traditional OSs leads to complex orchestration, configuration drifts, and manual intervention.

Full device modeled as a Digital Twin
Zero-touch provisioning
Zero downtime upgrades
Our solution //////////

Availability

In traditional OSs, a single driver or process failure often leads to a full system crash (Kernel Panic)

Self-healing resiliency
Health monitoring per component and during runtime
Automatic fault detection and recovery
Restricted resource usage
Our solution //////////

Maintainability

Board Support Packages are often frozen by semiconductor vendors and can rarely be patched especially in long product lifecycles.

Transactional, downtime-free OTA updates
Fully declarative configuration
Auto-rollback on failed updates
10+ year industrial deployments
Our solution //////////

still don’t trust us?
That’s fine

Choose your way to get clarity!

integration effort?
here’s what to expect

We don’t pretend it’s plug-and-play. But we work closely with your team to make the process clear, structured, and realistic — just like we’ve done with our strategic partners like Bechtle, Device Insight, and Miromico.

Define requirements
 & use case

Together with your team, we define the product requirements, security objectives, and lifecycle needs.

With Miromico, the focus was on a secure, long-life industrial LoRaWAN device with OTA updates and zero-touch provisioning.
1-2 weeks

Select and prepare 
the hardware

If you choose hardware from our ecosystem of strategic partners, no enablement is needed — we can start immediately.

For custom hardware, we take care of the entire hardware enablement process.

Miromico used preferred hardware from its supply chain, and Gapfruit completed the enablement in under two weeks.
2-4 weeks

Add required applications
and protocols

We add the necessary applications, services, and protocols using modular building blocks from the Gapfruit ecosystem wherever possible.

Bechtle used standard protocol building blocks.
2-12 weeks

Test & validate in
real-world conditions

We support your team in functional testing, fault simulation, and lifecycle validation — including rollback, health monitoring, and OTA workflows.

Our partners typically use dedicated test centers to validate new solutions under real-world conditions before deployment.

Miromico tested and validated their new product using their internal test infrastructure before moving to production.
1-4 weeks