OhhO Shield

Security for robots that touch the real world.

A robot is a computer with wheels and an arm — and an attack surface to match. A compromised robot isn't a data breach; it's a physical-safety incident. OhhO Shield is the security layer for the whole fleet.

Shield gives each robot a cryptographic identity rooted in hardware, establishes mutually-authenticated, encrypted channels for teleop and telemetry, and signs every over-the-air update so a robot only ever runs code you approved.

It continuously inventories every robot's software bill of materials (SBOM), matches it against known CVEs, and surfaces a single risk posture across the fleet — turning security from a one-time audit into a live signal.

• Device identity. Each robot gets a hardware-rooted key and certificate — no shared passwords, no anonymous nodes.
• Encrypted by default. Teleop, telemetry and ROS traffic run over mutually-authenticated, encrypted channels.
• Trusted boot & updates. Secure boot and signed OTA ensure a robot only runs code with a valid signature.
• SBOM & CVE watch. An automatic software bill-of-materials per robot, continuously checked against vulnerability feeds.
• Zero-trust access. Role-based, audited access to robots and the fleet console, with SSO on enterprise plans.
• One risk posture. A live security score per robot and across the fleet, integrated into OhhO Fleet.

Related: OhhO Fleet, OhhO Pilot, OhhO Comply