Bluefruit Software

Name: Bluefruit Software
Address: Gateway Business Centre, Barncoose Gateway Park, Redruth, TR153RQ, GB
Telephone: 03335 777 111
Price range: ££

Home
United Kingdom
Redruth
Bluefruit Software

Bluefruit Software’s UK based embedded software specialists work with innovative clients worldwide.

Bluefruit Software’s UK-based embedded specialists work with innovative clients worldwide. Our team of over 85 includes software engineers, testers, UX, compliance and quality specialists. Bluefruit believes excellent embedded software happens through investing in people and processes and a dedication to quality. We work closely with clients operating in safety-critical spaces. We aim to meet your organisation’s needs across hardware design, software, and high-level technical consulting. Industries we work in:

• Medical Devices & Equipment
• Aerospace & Space
• Scientific Instruments & Laboratory Equipment
• Industrial Systems
• Automotive
• Agritech

26/10/2026

Machinery safety law has long asked what a machine can do to people around it. From 20 January 2027, it also asks what someone else can do to the machine.

The control system requirements in the Machinery Directive (2006/42/EC) were written for closed systems, before all machines were connected to one another and to the outside world. Times have changed, and the regulations are catching up. The incoming EU Machinery Regulation—Regulation (EU) 2023/1230—requires, where appropriate, control systems to withstand reasonably foreseeable malicious attempts by third parties that could lead to a hazardous situation.

The new Machinery Regulation establishes legal requirements for cybersecurity without prescribing a specific standard. And since many modern machines are also products with digital elements, enter stage left the EU Cyber Resilience Act (CRA), whose cybersecurity rules will apply in full from 11 December 2027. So these two regulations overlap, and work done for one can help you meet the other. But demonstrating this overlap is the 👉 manufacturer’s responsibility 👈 (that’s you). You can’t assume that “doing the CRA” automatically satisfies the Machinery Regulation. That’s an architectural trap that is all too easy to fall into.

So far, so straightforward, right? Well, to make things even trickier for engineering teams, the standards haven’t yet been fully harmonised between these two regulations. Most teams today must document direct engineering justifications showing how control systems withstand malicious interference and track software interventions. So, what should those justifications be built on? Enter our third player: IEC 62443. For machinery, the standards being developed to meet these requirements are converging on IEC 62443, the multi-part series governing security for industrial automation and control systems.

It’s a complex, evolving regulatory landscape. Whether you’re an asset owner, system integrator, or product supplier, trying to keep up the machinery business as usual while staying compliant and safe right now is hard. Our guide to EU Machinery Regulation 2023/1230, IEC 62443, and the CRA will help you to understand the intersecting regulations and standards, and what your responsibilities are as they’re developed, ratified, published, applied, and enforced 👇
https://eu1.hubs.ly/H0znvp10

20/10/2026

Bluefruit offers software development and associated services—including independent V&V and audits—for safety-critical products across the medical, industrial, aerospace, and automotive sectors.

Our internal quality systems align with ISO 9001 and ISO 13485, and we adapt our engineering practices to your specific sector standards.

For example, your products may need to comply with medical device or Software as a Medical Device (SaMD) standards. Bluefruit has extensive experience with relevant standards, including IEC 62304, ISO 14971, and FDA regulations.

For industrial and functional safety, relevant standards could include IEC 61508.

For aerospace and defence, standards could include DO-178C and EN 14143.

And for automotive, standards could include ISO 26262, which traces its roots directly to IEC 61508.

These lists are not exhaustive, and if your products operate in other safety-critical and regulated spaces or need to comply with additional regulations and standards, let’s talk about what you need.

And right now, lots of organisations are realising that their products will soon fall under the incoming EU Cyber Resilience Act (CRA) regulations. Bluefruit can help you budget for and achieve full CRA compliance in advance of the regulation deadline in December 2027 with technical gap analysis, code remediation and defect fixing, and Software Bill of Materials (SBOM) and lifecycle tracking.

Read full details of Bluefruit’s services for software in safety-critical and regulated spaces 👇
https://eu1.hubs.ly/H0zc-8P0

14/10/2026

We know that many device manufacturers aren’t ready for the looming deadline for full compliance with the EU Cyber Resilience Act (CRA).

From 11 December 2027, all connected products sold in the EU market—including new units of products that are already on sale—must meet the CRA’s full requirements.

With annual engineering budgets being set now, remediation work to comply with the new regulations must be accounted for. Bluefruit can help you build defensible product security into your embedded software before the December 2027 deadline. We will conduct a technical gap analysis across the silicon, build pipeline, and codebases for your product lines to establish the exact scope of work required. We will then provide a transparent report telling you what our analysis finds, giving you a clear picture of your budgeting requirements.

Find out what you need to do and when to meet the phased introduction of the CRA, and how Bluefruit will help👇
https://eu1.hubs.ly/H0z3zmg0

12/10/2026

The IEC 61508 standard applies to any safety-related system where an electrical, mechanical, or functional failure could pose an unacceptable risk to a person’s health. Examples are many and wide-ranging: automotive ABS brake controls, train signalling and emergency shutdown (ESD) systems, gas boiler controllers, safety-critical surgical robots, flight control software, and so on.

While compliance with IEC 61508 isn’t a legal requirement, its principles show up in countless global safety regulations, and you’ll need it to access and distribute safety-related systems in many global markets. For example, working to its provisions can make it much easier to demonstrate compliance with EU frameworks such as IEC 62061 for machinery and ISO 26262 for automotive.

Like many standards, IEC 61508 is a beast: 500 pages of text that is hard to follow, understand, remember, and implement—especially if you’re new to it. The Bluefruit essential IEC 61508 checklist for embedded software compliance cuts through the jargon and explains exactly what the standard is, why you should follow it, and what you need to do to comply. Read our post to understand the basics, then grab your own copy of the checklist 👇
https://eu1.hubs.ly/H0y_b8-0

05/10/2026

We took a connected device that anyone can buy from Amazon. With five minutes of simple engineering that anyone with a soldering iron and a laptop can do, we read its Wi-Fi SSID and password.

Since the incoming EU Cyber Resilience Act (CRA) applies to any product with digital elements sold into the EU market, regardless of where it’s made, this basic hacking activity highlights a very real problem.

From 11 September 2026, the CRA made device manufacturers responsible for reporting any actively exploited security vulnerabilities and severe incidents. From 11 December 2027, Annex I essential security requirements and CE marking fully apply to products placed on the EU market.

Read the full story of what Bluefruiters Alex and Keifer did to the poor device, what the Cyber Resilience Act means for all device manufacturers, and what you need to do to avoid late-in-the-day product redesigns, and potentially significant CRA penalties👇
https://eu1.hubs.ly/H0yR07R0

28/09/2026

If you caught James Bemrose at the South West Regional Defence & Security Cluster member event last week, or even if you didn’t, you can read the full story that James told in his short talk at the event, ‘What’s keeping this diver alive?’

James talked about a recent project in which Bluefruit worked alongside JFD Global to deliver software for one of their products: a safety-critical piece of equipment that keeps divers alive in complex subsea environments. It goes without saying that under these conditions, full system reliability is essential, and that includes the software. Even a minor defect would pose an unacceptable risk to user safety and mission success.

The project saw Bluefruit deploy 24 engineers, split across four teams, dedicated to working on the product from kickoff through to final deployment. Software was delivered in multiple iterations, with each iteration delivering tested, working software deployed to product hardware. Stakeholders across the project had full visibility into the software work throughout, with regular planning, reviews, and demos built into every iteration.

Read the case study ‘How JFD and Bluefruit delivered a safety-critical defence project against a demanding deadline’ 👇
https://eu1.hubs.ly/H0yD6Rs0

21/09/2026

This Thursday 24 September 2026, James Bemrose, Bluefruit’s Strategic Partnerships Specialist, will be heading to Spaceport Cornwall. He’ll be there to catch up with contacts and friends at the next South West Regional Defence & Security Cluster (SWRDSC) member event.

As well as doing his networking thing—he’s never more at home than when he’s juggling a coffee and a pastry to shake hands with folks in an event space—James will also be speaking at the event. He’ll be explaining what embedded software is and what Bluefruit does by telling a ten-minute story about a team of Bluefruit engineers delivering more than 300,000 lines of safety-critical code for a bit of kit that keeps divers alive underwater.

If you’re heading along to the event, be sure to grab James, say hello, and have a chat with him about what you and your organisation are up to, what Bluefruit is up to, and whether we can help you.

More about the South West Regional Defence & Security Cluster 👉 https://eu1.hubs.ly/H0ysgh20

Register for the event 👉 https://eu1.hubs.ly/H0ysghj0

15/09/2026

When a product has been running reliably in the field for years, no one wants to touch the codebase.

But what happens when a key microcontroller reaches end of life, when an industry regulation changes, when a processor or peripheral stops being manufactured, or when a critical customer requests a new feature? Suddenly, you’re forced to alter software that hasn’t been compiled for years.

And even if none of these factors is forcing software changes, new regulations that apply retroactively to products, such as the new EU Cyber Resilience Act, are landing all the time.

So if your product has a legacy codebase that needs to be reopened, can it safely absorb the changes required, or has it reached the point where starting again is more cost-effective? If you’re facing this question, we recommend a legacy project assessment to provide the evidence you need to decide.

Our blog post explains what a legacy project assessment is, what a report would contain, what happens next, and why the decision to rewrite should always be made based on evidence rather than assumptions👇
https://eu1.hubs.ly/H0yjZ2Q0

08/09/2026

If you work in defence or aerospace, you’ll know that finding and onboarding new suppliers is a long process, taking months, even years, to find, shortlist, and then run suppliers through multiple compliance checks.

One of Bluefruit’s standout strengths is its ability to quickly understand a new client’s challenges, assemble the right multidisciplinary team, and get straight to work delivering fully tested, safety-ready, and fully compliant software releases. To help defence and aerospace buyers get the embedded software expertise they need quickly, Bluefruit Software is now registered on Hellios Information’s Joint Supply Chain Accreditation Register (JOSCAR).

JOSCAR is a UK-based supplier assurance system that provides defence and aerospace buyers with a central source of validated supplier information. Its members include the Ministry of Defence, BAE Systems, Babcock, Leonardo, Thales, Rolls-Royce Submarines, Raytheon UK, Roke, General Dynamics, and Draken. Our registration means participating buying organisations can now access our supplier assurance information directly through the register, helping to simplify procurement and accelerate the route from initial conversation to project delivery.

For defence and aerospace organisations looking for additional embedded software capability and capacity, get in touch to discuss your challenges and what you need, and how Bluefruit can help.

06/08/2026

JFD Global turned to Bluefruit when they needed a trusted software team that could step in, take ownership, and deliver embedded software to a fixed deadline—without compromising on safety.

JFD’s systems are designed for use in complex, safety-critical subsea environments where reliability is essential. The business entrusted Bluefruit with full responsibility for the embedded software in a diving rebreather system. Continuous integration, validation, and regular stakeholder visibility and demos were all locked into the delivery plan.

Read our in-depth case study to see how Bluefruit worked alongside JFD to deliver a robust and maintainable software foundation that enabled JFD to take their safety-critical product to market on time and with confidence: https://eu1.hubs.ly/H0xpK4B0

Address

Gateway Business Centre, Barncoose Gateway Park
Redruth
TR153RQ

Telephone

03335 777 111

Website

http://www.bluefruit.co.uk/

Alerts

Be the first to know and let us send you an email when Bluefruit Software posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to Bluefruit Software:

Show All