Bluefruit Software

Bluefruit Software Bluefruit Software’s UK based embedded software specialists work with innovative clients worldwide.

Bluefruit Software’s UK-based embedded specialists work with innovative clients worldwide. Our team of over 85 includes software engineers, testers, UX, compliance and quality specialists. Bluefruit believes excellent embedded software happens through investing in people and processes and a dedication to quality. We work closely with clients operating in safety-critical spaces. We aim to meet your organisation’s needs across hardware design, software, and high-level technical consulting. Industries we work in:

• Medical Devices & Equipment
• Aerospace & Space
• Scientific Instruments & Laboratory Equipment
• Industrial Systems
• Automotive
• Agritech

We know that many device manufacturers aren’t ready for the looming deadline for full compliance with the EU Cyber Resil...
14/10/2026

We know that many device manufacturers aren’t ready for the looming deadline for full compliance with the EU Cyber Resilience Act (CRA).

From 11 December 2027, all connected products sold in the EU market—including new units of products that are already on sale—must meet the CRA’s full requirements.

With annual engineering budgets being set now, remediation work to comply with the new regulations must be accounted for. Bluefruit can help you build defensible product security into your embedded software before the December 2027 deadline. We will conduct a technical gap analysis across the silicon, build pipeline, and codebases for your product lines to establish the exact scope of work required. We will then provide a transparent report telling you what our analysis finds, giving you a clear picture of your budgeting requirements.

Find out what you need to do and when to meet the phased introduction of the CRA, and how Bluefruit will help👇
https://eu1.hubs.ly/H0z3zmg0

The IEC 61508 standard applies to any safety-related system where an electrical, mechanical, or functional failure could...
12/10/2026

The IEC 61508 standard applies to any safety-related system where an electrical, mechanical, or functional failure could pose an unacceptable risk to a person’s health. Examples are many and wide-ranging: automotive ABS brake controls, train signalling and emergency shutdown (ESD) systems, gas boiler controllers, safety-critical surgical robots, flight control software, and so on.

While compliance with IEC 61508 isn’t a legal requirement, its principles show up in countless global safety regulations, and you’ll need it to access and distribute safety-related systems in many global markets. For example, working to its provisions can make it much easier to demonstrate compliance with EU frameworks such as IEC 62061 for machinery and ISO 26262 for automotive.

Like many standards, IEC 61508 is a beast: 500 pages of text that is hard to follow, understand, remember, and implement—especially if you’re new to it. The Bluefruit essential IEC 61508 checklist for embedded software compliance cuts through the jargon and explains exactly what the standard is, why you should follow it, and what you need to do to comply. Read our post to understand the basics, then grab your own copy of the checklist 👇
https://eu1.hubs.ly/H0y_b8-0

We took a connected device that anyone can buy from Amazon. With five minutes of simple engineering that anyone with a s...
05/10/2026

We took a connected device that anyone can buy from Amazon. With five minutes of simple engineering that anyone with a soldering iron and a laptop can do, we read its Wi-Fi SSID and password.

Since the incoming EU Cyber Resilience Act (CRA) applies to any product with digital elements sold into the EU market, regardless of where it’s made, this basic hacking activity highlights a very real problem.

From 11 September 2026, the CRA made device manufacturers responsible for reporting any actively exploited security vulnerabilities and severe incidents. From 11 December 2027, Annex I essential security requirements and CE marking fully apply to products placed on the EU market.

Read the full story of what Bluefruiters Alex and Keifer did to the poor device, what the Cyber Resilience Act means for all device manufacturers, and what you need to do to avoid late-in-the-day product redesigns, and potentially significant CRA penalties👇
https://eu1.hubs.ly/H0yR07R0

If you caught James Bemrose at the South West Regional Defence & Security Cluster member event last week, or even if you...
28/09/2026

If you caught James Bemrose at the South West Regional Defence & Security Cluster member event last week, or even if you didn’t, you can read the full story that James told in his short talk at the event, ‘What’s keeping this diver alive?’

James talked about a recent project in which Bluefruit worked alongside JFD Global to deliver software for one of their products: a safety-critical piece of equipment that keeps divers alive in complex subsea environments. It goes without saying that under these conditions, full system reliability is essential, and that includes the software. Even a minor defect would pose an unacceptable risk to user safety and mission success.

The project saw Bluefruit deploy 24 engineers, split across four teams, dedicated to working on the product from kickoff through to final deployment. Software was delivered in multiple iterations, with each iteration delivering tested, working software deployed to product hardware. Stakeholders across the project had full visibility into the software work throughout, with regular planning, reviews, and demos built into every iteration.

Read the case study ‘How JFD and Bluefruit delivered a safety-critical defence project against a demanding deadline’ 👇
https://eu1.hubs.ly/H0yD6Rs0

This Thursday 24 September 2026, James Bemrose, Bluefruit’s Strategic Partnerships Specialist, will be heading to Spacep...
21/09/2026

This Thursday 24 September 2026, James Bemrose, Bluefruit’s Strategic Partnerships Specialist, will be heading to Spaceport Cornwall. He’ll be there to catch up with contacts and friends at the next South West Regional Defence & Security Cluster (SWRDSC) member event.

As well as doing his networking thing—he’s never more at home than when he’s juggling a coffee and a pastry to shake hands with folks in an event space—James will also be speaking at the event. He’ll be explaining what embedded software is and what Bluefruit does by telling a ten-minute story about a team of Bluefruit engineers delivering more than 300,000 lines of safety-critical code for a bit of kit that keeps divers alive underwater.

If you’re heading along to the event, be sure to grab James, say hello, and have a chat with him about what you and your organisation are up to, what Bluefruit is up to, and whether we can help you.

More about the South West Regional Defence & Security Cluster 👉 https://eu1.hubs.ly/H0ysgh20

Register for the event 👉 https://eu1.hubs.ly/H0ysghj0

When a product has been running reliably in the field for years, no one wants to touch the codebase.But what happens whe...
15/09/2026

When a product has been running reliably in the field for years, no one wants to touch the codebase.

But what happens when a key microcontroller reaches end of life, when an industry regulation changes, when a processor or peripheral stops being manufactured, or when a critical customer requests a new feature? Suddenly, you’re forced to alter software that hasn’t been compiled for years.

And even if none of these factors is forcing software changes, new regulations that apply retroactively to products, such as the new EU Cyber Resilience Act, are landing all the time.

So if your product has a legacy codebase that needs to be reopened, can it safely absorb the changes required, or has it reached the point where starting again is more cost-effective? If you’re facing this question, we recommend a legacy project assessment to provide the evidence you need to decide.

Our blog post explains what a legacy project assessment is, what a report would contain, what happens next, and why the decision to rewrite should always be made based on evidence rather than assumptions👇
https://eu1.hubs.ly/H0yjZ2Q0

If you work in defence or aerospace, you’ll know that finding and onboarding new suppliers is a long process, taking mon...
08/09/2026

If you work in defence or aerospace, you’ll know that finding and onboarding new suppliers is a long process, taking months, even years, to find, shortlist, and then run suppliers through multiple compliance checks.

One of Bluefruit’s standout strengths is its ability to quickly understand a new client’s challenges, assemble the right multidisciplinary team, and get straight to work delivering fully tested, safety-ready, and fully compliant software releases. To help defence and aerospace buyers get the embedded software expertise they need quickly, Bluefruit Software is now registered on Hellios Information’s Joint Supply Chain Accreditation Register (JOSCAR).

JOSCAR is a UK-based supplier assurance system that provides defence and aerospace buyers with a central source of validated supplier information. Its members include the Ministry of Defence, BAE Systems, Babcock, Leonardo, Thales, Rolls-Royce Submarines, Raytheon UK, Roke, General Dynamics, and Draken. Our registration means participating buying organisations can now access our supplier assurance information directly through the register, helping to simplify procurement and accelerate the route from initial conversation to project delivery.

For defence and aerospace organisations looking for additional embedded software capability and capacity, get in touch to discuss your challenges and what you need, and how Bluefruit can help.

JFD Global turned to Bluefruit when they needed a trusted software team that could step in, take ownership, and deliver ...
06/08/2026

JFD Global turned to Bluefruit when they needed a trusted software team that could step in, take ownership, and deliver embedded software to a fixed deadline—without compromising on safety.

JFD’s systems are designed for use in complex, safety-critical subsea environments where reliability is essential. The business entrusted Bluefruit with full responsibility for the embedded software in a diving rebreather system. Continuous integration, validation, and regular stakeholder visibility and demos were all locked into the delivery plan.

Read our in-depth case study to see how Bluefruit worked alongside JFD to deliver a robust and maintainable software foundation that enabled JFD to take their safety-critical product to market on time and with confidence: https://eu1.hubs.ly/H0xpK4B0

Today, on 4 August 2026, Bluefruit turns 26. It’s been another full and busy year for the business since we celebrated o...
04/08/2026

Today, on 4 August 2026, Bluefruit turns 26. It’s been another full and busy year for the business since we celebrated our quarter-century this time last year. We have grown our team. We’ve attended events locally, nationally, and around the world. We’ve continued to learn and expand our own knowledge and skills and to teach, coach, and mentor ourselves, our customers, and the software community in the never-ending pursuit of secure, safe, compliant, highest-quality software and products. And, of course, we’ve designed, written, tested, and shipped thousands of lines of embedded software code for our ever-expanding list of happy customers.

Congratulations to everyone on the team for another smooth and successful Bluefruit HQ orbit around the sun!

Q-Day is the point at which a quantum computer can break today’s encryption.  Nobody will give you a firm date when this...
20/07/2026

Q-Day is the point at which a quantum computer can break today’s encryption. Nobody will give you a firm date when this will happen, and the estimates vary. Most experts think it will be sometime in the 2030s. But for a long-life embedded product, you can skip the guesswork: if what you ship today will still be in service in the 2030s, its secure lifetime already enters the risk window.

And if your product operates in a regulated, quality- and safety-critical space, the stakes are even higher. You already carry a duty to manage security risk through standards and regulations such as IEC 62304, EU MDR, IEC 6244, and the incoming Cyber Resilience Act. And a forged firmware update here doesn’t cost you data; it costs you safety.

So, the question isn’t only ‘will my product still be secure in a decade?’ (If you don’t take action against the threat that quantum computing presents to your product’s security, it definitely won’t be). It’s ‘can I still show it’s safe and compliant?’

Bluefruit’s blog post “Quantum-safe by design: why embedded security can’t wait for Q-Day” explains the risks and challenges, and sets out five steps you should take to start your post-quantum migration today so that your product stays secure and its users stay safe 💡✅
https://eu1.hubs.ly/H0x1njN0

Address

Gateway Business Centre, Barncoose Gateway Park
Redruth
TR153RQ

Alerts

Be the first to know and let us send you an email when Bluefruit Software posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to Bluefruit Software:

Shortcuts

Share