Your cart 0 items
Your cart is empty.
Searching the site...
No matches. Try another word.
Log in
Embedded & edge

Third-party software appliance

We take your software and ship it as your hardware. A hardened, pre-loaded image on right-sized fanless or rackmount hardware, imaged in volume, badged as yours, and supported as one box.

Talk to engineering See all solutions
The problem

Great software, shipped as a support ticket.

You wrote software that runs a shop floor, a clinic or a checkpoint. Then a customer asks you to install it, and you inherit their hardware: a mismatched mini-PC, a BIOS you have never seen, a Windows build three years stale, and an antivirus that quarantines your service on Tuesday. Every site is a different machine, so every support call starts from zero. Your engineers spend the week on driver versions and thermal throttling instead of the product. What the customer actually bought was an outcome in a box, powered on and working. That box is an appliance, and building one is a different discipline from writing the software that runs on it.

Design targets
< 90 s Power-on to your service running
1 image Identical on every unit shipped
10 yr Hardware availability from launch
0 Customer BIOS decisions
The stack

One box, three layers we own.

Hardware, image and provisioning. Each layer removes a class of support ticket you get today. Open a layer for what it does and why it is there.

No moving parts
Imagery in production

Right-sized hardware

Fanless or rackmount, chosen to your load.

Fanless x86 or short 1U rack TPM 2.0, secure boot -20 to +60 C options
No moving parts
Imagery in production

Right-sized hardware

Fanless or rackmount, chosen to your load.

Fanless x86 or short 1U rack TPM 2.0, secure boot -20 to +60 C options

We match the base unit to the profiled workload, not to a spec sheet. Most edge builds are a sealed fanless box with no fan and no spinning disk, so there is nothing to clog, seize or get noisy on a shop floor. Every unit carries TPM 2.0 and secure boot, and an industrial temperature variant runs from -20 to +60 C for a cabinet or an unheated room. The board revision is frozen at sign-off, so the machine in the field is the machine on our bench.
Read-only root
Imagery in production

Hardened image

Your software on a locked, atomic OS.

CalyOS Embedded, A/B slots LUKS full-disk, signed boot Rolls back on a bad update
Read-only root
Imagery in production

Hardened image

Your software on a locked, atomic OS.

CalyOS Embedded, A/B slots LUKS full-disk, signed boot Rolls back on a bad update

Your software is layered onto CalyOS Embedded as a read-only image with two boot slots. An update writes the spare slot, checks its signature and only then flips the boot pointer, so a failed update rolls straight back instead of bricking a site. The root filesystem is immutable and the disk is LUKS-encrypted against the unit's TPM, so nothing drifts and nothing walks off on a pulled SSD. There is no shell, no package manager and no unused daemon for a customer to break.
Serialised
Imagery in production

Factory provisioning

Imaged, keyed and burned-in in volume.

USB and PXE imaging line Per-unit keys and asset tags 24 h thermal burn-in
Serialised
Imagery in production

Factory provisioning

Imaged, keyed and burned-in in volume.

USB and PXE imaging line Per-unit keys and asset tags 24 h thermal burn-in

Units come off an imaging line that writes the golden image, injects a per-unit key, serial and asset tag, and records a test result for each machine before it is packed. Every unit runs a 24 hour thermal burn-in at load, so infant-mortality failures happen on our floor, not at your customer. What drop-ships is a sealed, serialised, tested box in your carton, ready to power on.
Solution optimized products

Base units we build on.

Each is a starting unit we harden, image and badge as yours; you pick the class, we size the parts.

Imagery in production
Fanless edge

Verge Box

Atom N-series, fanless

Sealed fanless x86 with no moving parts, DIN-rail or VESA mount, 2.5GbE, RS-232 and RS-485 and GPIO for line equipment, -20 to +60 C variant.

Request datasheet
Imagery in production
Fanless edge

Verge Box Pro

Core i, dual 2.5GbE

More compute in the same fanless shell for local inference or an on-site database, dual NVMe and TPM-backed disk encryption.

Request datasheet
Imagery in production
Gateway

Verge Gate

PoE out, RS-485, IP40

Protocol gateway with PoE-out, isolated serial and dual-SIM cellular for sites with no fixed line, plus a hardware watchdog and remote power-cycle.

Request datasheet
Imagery in production
Rack

Serve Compute 1U

Xeon-D, redundant PSU

Short-depth 1U for a server-room appliance, ECC memory, redundant power, IPMI out-of-band management and front-serviced drives.

Request datasheet
Imagery in production
Rack

Serve Compute 2U GPU

Single GPU, 8 bays

Two-rack-unit build with one data-centre GPU and eight hot-swap bays for a vision or model-serving appliance.

Request datasheet
Under the hood

What productising actually changes.

Imagery in production
One machine

The variable that ruined support is gone

When every customer runs the same board, the same firmware and the same image, a support call is about your software, not their hardware. You reproduce a fault on a unit on your own bench because it is bit-for-bit the machine in the field. Driver roulette, BIOS settings and a customer antivirus stop being your problem, because there is no general-purpose OS underneath for anyone to touch. The class of ticket that used to eat your week does not arrive.

Imagery in production
Atomic updates

Updates that cannot brick a site

The image ships in two slots. An update writes the inactive slot, verifies its signature and only then flips the boot pointer; a failed boot rolls straight back to the slot that worked. A remote site 300 km away updates without a truck roll and without the 3am call a half-written update usually brings. The root filesystem is read-only, so the unit a year later is the unit you shipped.

Imagery in production
Your brand

It leaves as your product, not ours

Chassis badge, boot splash, hostname, label and carton are yours. Calyraen is on the compliance file and inside the case, not the front of it. The customer buys your appliance, calls your number and never learns who built the metal. Under OEM terms you hold the product identity and we hold the manufacturing behind it.

“We stopped shipping a zip file and a two-page install guide. Now a box turns up, they power it on, and our first support call is about a feature, not a firewall.”
Head of product, an industrial software vendor
Productisation

From your build to a sealed box.

Turning working software into a manufacturable appliance is a project with a defined path. This is the route from your first artifact to a unit rolling off an imaging line.

The path

How your software becomes an appliance.

  1. Intake and profiling

    You hand us your installer, container or image and a target workload. We profile CPU, memory, storage IO and thermals under real load to find the hardware envelope, not a guess.

  2. Image build

    Your software is layered onto CalyOS Embedded as a read-only, A/B-updatable image with a signed boot chain and disk encryption, and only the services you need are left running.

  3. Hardware selection

    We match the profile to a base unit and lock the bill of materials: exact board revision, memory, storage and IO, so every unit is identical and repeatable for years.

  4. Pilot and sign-off

    You get pilot units built the way production will be. You test the real thing, we fix the image, and you sign off one golden image and one frozen bill of materials.

  5. Volume build

    The line images, keys, serialises, burns in and packs units to that golden image, with a per-unit test record and your branding, ready to drop-ship.

What we harden

The image, locked down.

Sealed by default

Locked

The shipped image runs a read-only root filesystem, secure boot from a signed chain, and full-disk encryption bound to the unit TPM 2.0. Only the services your product needs are present; the general-purpose tooling a customer could break or an attacker could use is not installed. Nothing on the box drifts, because there is nowhere for drift to accumulate.

Imagery in production

Signed, measured boot

Secure Boot plus TPM 2.0 measured boot means the unit only runs the image we signed. A tampered image will not boot.

Read-only, A/B root

The root filesystem is immutable and updates land in a second slot, so a bad update rolls back instead of bricking the unit.

Least-service surface

No end-user shell, no package manager, no unused daemon. The attack surface is your app and the kernel, nothing spare.

Encrypted at rest

LUKS full-disk encryption keyed to the TPM protects customer data if a unit is stolen or an SSD is pulled.

The difference

Appliance versus 'send them a VM'.

Calyraen applianceA VM or installer
Hardware One known board, controlled for years Whatever the customer already owns
OS drift Read-only, identical on every unit Their patch cycle and their antivirus
Updates Signed, atomic, auto-rollback Manual, can half-apply and brick
First support call About your feature About their firewall and drivers
Branding Ships as your product Runs inside their generic machine
Lifecycle 10 year availability, revision-controlled Silent CPU and board swaps
Specify it with us

Bring us a build.

Send an installer or an image and the load it has to carry. We come back with a base unit, a thermal envelope and a productisation plan.

Talk to engineering OEM & ODM
The approach

Sized to the load, not the brochure.

Over-specifying an appliance wastes money on every unit you ship; under-specifying it produces thermal throttling and a support queue. We size from measured behaviour. You give us the software and a representative workload, and we profile it: sustained CPU, memory footprint, storage read and write patterns, network throughput and the heat all of it makes in the enclosure it will live in. The base unit that comes out has headroom for your roadmap and no more. Because the bill of materials is frozen, that sizing holds for every unit for the life of the product, so a unit built in year four behaves like a unit built at launch.

Sizing envelope
6 to 64 W Fanless power draw, edge units
-20 to +60 C Industrial temperature option
4 to 128 GB Memory across the range
0 dB Fanless acoustic, no moving parts
Three classes

Where most builds land.

Most appliances fit one of three envelopes; we tune parts within the class you pick.

Edge

Sensor and control

A fanless Atom-class box on a wall or DIN rail running a control app, a protocol bridge or light logging. Single-digit watts, silent, sealed against dust.

Local compute

Inference or database

A Core-class fanless unit or short-depth 1U for on-site inference, a local database or a busy gateway. NVMe storage, optional ECC memory, more IO.

Server room

GPU and throughput

A rackmount build with redundant power, ECC memory and an optional data-centre GPU for vision or model serving, where a fan is fine and uptime is the point.

Engineering questions

On sizing and change.

What if our software gets heavier over time?

We size with headroom for the roadmap you tell us about, and the base range shares a footprint, so a step up in compute is usually the same chassis with a different board, not a new appliance to re-certify.

Can we mix sizes in one order?

Yes. A common pattern is a small edge unit at each site and a rack unit at the customer head office, all running the same image family, imaged and supported as one product line.

Do you lock the components?

The bill of materials is frozen at sign-off and put under revision control. If a part goes end-of-life we qualify a replacement and tell you before anything changes, so nothing swaps silently under your product.

Size it with us

Send the workload.

Give us the software and a representative load and we profile it and propose an envelope. No commitment to a part until you have seen the numbers.

Talk to engineering See all solutions
Support & OEM

One box, one number.

Once it ships as your product, the customer calls you and you call us. Here is how the appliance is branded, supported and kept available for the years your product will live.

The support model

Supported as one box.

One throat to choke

Whole

You do not integrate a board from one supplier, an OS from another and a warranty from a third. The appliance is one part number with one warranty and one support contract. When a unit fails you raise one ticket, and a replacement built to the same golden image and bill of materials is on its way before the dead one comes back. Your customer sees your brand throughout.

Imagery in production

Advance replacement

A spare built to the same image ships before the failed unit is returned, so a site is down for a courier run, not a repair cycle.

Revision control

Every unit board revision, bill of materials and image version is on record, so we know exactly what is in the field under your name.

Security updates

Signed image updates for the OS and kernel through the support term, tested against your frozen configuration before release.

End-of-life notice

If a component goes end-of-life we qualify a drop-in and give you notice in writing, never a silent swap under your product.

How the appliance is supplied

1 Part number and warranty
10 yr Availability from launch
Signed Updates through the term
Per-unit Test and serial record
Your badge

Shipped as yours.

Branding runs from the boot splash to the outer carton; pick how deep it goes.

Cosmetic

Badge and splash

Your logo laser-etched or printed on the chassis, your boot splash, hostname and product label. The fastest route to a branded box.

Full OEM

Your product identity

Custom bezel or chassis colour, your part numbers, your documentation and packaging. Calyraen appears only on the compliance file and inside the case.

ODM

A shape of your own

Where volume justifies it, a bespoke enclosure and board designed around your product, built and certified by us and owned as your line.

“Our customers think we make hardware now. They never see a supplier behind it, and when a unit dies the replacement is on the shelf before the engineer arrives.”
Operations director, a retail technology vendor
The shelf

Briefs and worked cases.

The commercial and technical case for productising, plus real deployments. Open one to read the detail.

Brief
Imagery in production

Productisation brief

The one-page case for shipping an appliance.

2 pages For decision makers
Brief
Imagery in production

Productisation brief

The one-page case for shipping an appliance.

2 pages For decision makers

A two-page summary for the person who signs off: why an installer becomes a support cost, what an appliance removes, the three size classes and the OEM options, with the headline commercial model. Written for a product owner weighing build-versus-productise, not for the engineer who will integrate it.
White paper
Imagery in production

Appliance engineering white paper

The image, boot chain and update model.

16 pages For technical evaluators
White paper
Imagery in production

Appliance engineering white paper

The image, boot chain and update model.

16 pages For technical evaluators

The technical rationale: the read-only A/B image, secure and measured boot, TPM-bound disk encryption, and the signed atomic update path with automatic rollback. Covers the CalyOS Embedded layering, how your software is packaged, and how a fleet updates without a truck roll. Written for the engineer who has to trust the box before signing off.
White paper
Imagery in production

OEM and lifecycle guide

Branding, availability and revision control.

12 pages For product and procurement
White paper
Imagery in production

OEM and lifecycle guide

Branding, availability and revision control.

12 pages For product and procurement

How branding runs from boot splash to carton, the difference between cosmetic, full OEM and ODM, and how availability, revision control and end-of-life notices work over a ten-year product life. Written for the product manager and procurement lead who own the relationship after launch.
Use case
Imagery in production

Clinic check-in appliance

Waiting-room kiosk software as a sealed box.

UnitVerge Box Rolefanless edge
Use case
Imagery in production

Clinic check-in appliance

Waiting-room kiosk software as a sealed box.

UnitVerge Box Rolefanless edge

A clinic software vendor shipped their waiting-room check-in as a sealed fanless Verge Box. No PC for reception to touch, no antivirus to fight, one image on every site. Power-on to check-in screen in under a minute, updates pushed overnight with rollback, and the vendor brand on the bezel.
Use case
Imagery in production

Factory vision node

Line-side inference on a rugged unit.

UnitVerge Box Pro Rolelocal inference
Use case
Imagery in production

Factory vision node

Line-side inference on a rugged unit.

UnitVerge Box Pro Rolelocal inference

A machine-vision vendor productised their inspection model onto a Verge Box Pro with inference at the line. Frames are processed on the unit, with no dependence on a factory network or a cloud link. One frozen image across dozens of lines, TPM-bound encryption for the model, and a spare on the shelf for a same-day swap.
Request the files

Take the pack away.

Datasheets and guides sent on request; tell us your workload and we include a sizing note.

Appliance base-unit datasheets Datasheet PDF, on request Appliance engineering white paper White paper PDF, on request OEM and lifecycle guide OEM PDF, on request
Commercial questions

Terms and compliance.

Whose name is on the compliance?

The appliance is certified as a finished product to CE and UKCA, EN 55032 Class B emissions, IEC 62368-1 safety and FCC Part 15, with RoHS, REACH and WEEE handled. We hold the technical file; you mark it as your product under OEM terms.

Do we own the design?

Under standard OEM terms you own your product identity, part numbers and branding, and we own the manufacturing and the base design. Under ODM terms, where you fund a bespoke enclosure and board, the ownership split is agreed up front in writing.

What is the minimum volume?

Cosmetic branding on a standard base unit starts low, in the tens. Full OEM and ODM have higher floors because of tooling and certification, and we tell you the break points before you commit.

Start it with us

Let us build your first box.

Send a build and a workload and we scope a pilot unit. You test the real appliance before anything goes to volume.

Talk to engineering OEM & ODM