Built for devices you can't walk over and fix
Edge devices run in factories, clinics, and the field — often with no one nearby and no network to hide behind. WendyOS is designed so a device keeps working, keeps its data private, and can always be safely updated. And because it's Apache 2.0 open source, you can audit every claim on this page.
mTLS everywhere
Once a device is provisioned, every connection to it — gRPC from the CLI, Bluetooth from mobile apps, tunnels to Wendy Cloud — requires mutual TLS with per-device certificates. No shared passwords, no open ports.
Apps run sandboxed
Applications run as unprivileged containers with seccomp profiles and CPU, memory, and PID limits. Fine-grained entitlements in wendy.json gate access to GPU, camera, audio, networking, USB, GPIO, and storage — every app gets only what it declares.
Updates that can’t brick
WendyOS uses A/B partition updates: a new OS release installs to the inactive partition, and if the device fails to boot it automatically rolls back to the previous version. Fleet updates stop being a leap of faith.
Locked-down system access
The root filesystem is read-only, and containers reach system services like Wi-Fi and Bluetooth only through a filtering D-Bus proxy — never directly. Compromising an app doesn’t hand over the device.
A published threat model, not a promise
We maintain a public STRIDE threat model for the Wendy Agent covering spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege — with named threats, trust boundaries, and the mitigations that address each one. It lives in the open-source repository and evolves with the code.
Reporting a vulnerability
Found a security issue in WendyOS, the Wendy CLI, or Wendy Cloud? Email contact@wendy.dev with the details and we'll respond promptly. Please give us a reasonable window to fix the issue before public disclosure. For questions about deploying WendyOS in regulated environments, see our medical devices and autonomous defense pages, or talk to us.
Ready to build on WendyOS?
WendyOS is the open-source operating system for Physical AI — deploy your apps to NVIDIA Jetson, Raspberry Pi, and more in seconds, over USB-C, wireless, or the cloud.