An open-source, distributed, and efficient IoT platform. Built in Rust, from front to back. Designed with security, privacy, and flexibility in mind.
Your data. Your control.
Built for the Builders
A complete IoT platform built to work for you. No need to start from scratch. We've created a simple API meant to easily integrate with any device, and the tech stack you're already using.
Interoperability
- No specific firmware
- No supported device list
- HTTPS or CoAP-over-TLS (RFC 8323) — same ingestion API
Security
- 100% written in Rust
- Per-device Ed25519 keypairs, not JWTs
- Self-hosted Ory Kratos for dashboard auth
Open Source
- AGPL-3.0 Licensed
- Built on Cloudflare Workers, Ory, and Zephyr
- Open development on GitHub
Memory Safety Meets Performance
Experience the power of Rust's compile-time guarantees. Our platform leverages Rust's ownership system to eliminate entire classes of bugs and security vulnerabilities while delivering C++-level performance.
Zero Runtime Overhead
No garbage collector, no runtime. Pure performance.
69 Bytes on the Wire
No JWT, no base64 bloat — a binary bearer token: version, expiry, signature.
Refresh Revokes
Minting a new device token overwrites the old public key — no revocation list needed.
Rust-Powered Excellence
Built for Constrained, Cellular Hardware
Every byte costs money and battery on a cellular device. PidgeIoT is designed around small, auditable wire formats instead of heavyweight standards — maximum security with minimal data transfer.
69-Byte Tokens
A compact binary bearer token — version, expiry, signature — verified with one Ed25519 check at the edge. No JWT overhead.
CoAP-over-TLS/TCP
RFC 8323 CoAP for devices too constrained for a full HTTPS stack — still fully encrypted, no bare UDP.
Dictionary Logging
Structured device logs from our Zephyr library, shipped as dictionary-compressed codes instead of raw strings.
Edge-Native, Not Data-Center-Bound
Every request runs on Cloudflare's edge network — no servers to provision or patch.
One Durable Object Per Device
Each pigeon owns a small, SQLite-backed Durable Object — the single source of truth for its shadow, ACL, and device credentials — mirrored best-effort into Postgres via Hyperdrive for cross-device queries.
No Telemetry Lock-In
Point a device at your own InfluxDB-line-protocol-compatible endpoint and its telemetry goes straight there instead of the platform's built-in history store — your data, your database.
Content-Addressed Firmware
Firmware images live in R2, addressed by their own SHA-256 and catalogued per flock. Rolling out a version reuses the same shadow model as config — devices resume large downloads with Range requests instead of starting over.
Ready to Build Secure IoT Solutions?
Join us in creating the next generation of IoT management.
No credit card required.