The wedge is not the sensor — it is secure-by-design done in silicon (secure boot, HSM-signed OTA, SBOM) plus the compliance dashboard as a service, offered in both wired (PoE / Modbus / BACnet / OPC-UA) and wireless (LoRaWAN / LTE-M–NB-IoT / WiFi) variants on one platform. Land cold-chain / clinical first, then extend the same platform to air quality and location.
01Where to play — market & connectivity
Your three candidate categories, by 2025 market size. Figures are directional (they vary by research firm); ranges given, not false precision.
| # | Category | 2025 market | CAGR | Note |
|---|---|---|---|---|
| 1 | Temp / humidity — cold chain | ~$7–8.5B | ~12–13% | Biggest. Pharma/GxP + food-safety driven. = Ventrix Vault. |
| 2 | Location / asset tracking | ~$5.7B | ~12.5% | WiFi ~42% of revenue; BLE indoor, cellular roaming, LPWAN long-battery. |
| 3 | Air quality (IAQ) | ~$3.1B | ~13% | Smallest but fastest-regulating. = UltraDetekt / Danum. |
Overall IoT sensor market ~$24B (2025), 600M+ units/yr. Connectivity split (all IoT): WiFi ~32% · LPWAN ~25% · cellular ~22% · rest BLE/Zigbee. LoRaWAN is the LPWAN leader outside China (~40% share), converging with LTE-M (~35% each) by 2027.
Recommended radio stack — one security core across all
LoRaWAN
Primary wireless — 10–15 yr battery, range, building penetration. Every serious IAQ / cold-chain vendor ships it.
LTE-M / NB-IoT
Roaming / gateway-less sites. The Cavli C42QM path.
WiFi
Single-site, powered.
Wired · PoE + Modbus/BACnet/OPC-UA
BMS & industrial integration — the "wired" half of the pitch.
02Who to beat, per beachhead segment
Healthcare / cold chain — primary beachhead
| Vendor | Model | Strength | Structural gap |
|---|---|---|---|
| Controlant | HW + SaaS, per-shipment | Pfizer COVID distribution; GxP; 24/7 monitored service | Transit-only; expensive for SME |
| Sensitech (Carrier) + Lynx | HW + SaaS | Largest cold-chain share; Lynx FacTOR auto pharma release; bought Berlinger | Weak general asset tracking; heavy pricing |
| ELPRO (Bosch) | MaaS + HW | elproPREDICT predictive; liberoMANAGER | No RTLS; niche pharma |
| Sonicu | HW + SaaS | Facility cold storage; USP/FDA reporting | No transit; no RTLS |
| CenTrak (Halma) | HW infra | Hospital RTLS (IR+RFID+BLE) | No cold chain |
None offer per-sensor OTA firmware management, unify cold-chain + RTLS + facility environmental, or ship secure-by-default (CRA). All are enterprise-priced and opaque.
Smart Buildings / IAQ
Honeywell Forge, Siemens Building X, JCI OpenBlue (software overlays on their own BMS — no per-sensor OTA, no SME entry), Schneider EcoStruxure (own sensors + BMS), Airthings for Business (closest — own IAQ sensors + dashboard, SME-friendly, but no HVAC/FDD, no OTA). Gap: per-sensor OTA · open-hardware without an integration project · affordable SME entry · unified HVAC+IAQ+occupancy+energy in one low-cost SKU.
Retail / Logistics cold chain
Sensitech/Carrier (leader), Tive (Solo Pro biologics/cryo trackers), Roambee (powers ~42% of US pharma shipments), Zebra. Gap: unified cold-chain + tracking + inventory · SME per-shipment pricing · OTA without physical recall · excursion prevention, not just detection.
03The gaps = the wedge
From the landscape analysis, what almost no incumbent does — mapped to SP's position:
| Gap (every segment) | SP position |
|---|---|
| OTA firmware mgmt for heterogeneous fleets — "a universal gap" | Built & live HSM-signed OTA control plane + firmware, E2E-proven |
| CRA / secure-by-default — every legacy vendor ships pre-CRA code | Core moat secure boot, signed OTA, SBOM generator |
| Hardware-agnostic — proprietary lock-in everywhere | Yes portable SDK across ESP32 / STM32 / RAK |
| Real-time compliance automation w/ audit trail — only basic alerts today | Build dashboard is the vehicle |
| Transparent / SME pricing — ~zero public per-device pricing anywhere | Decide publish tiers = differentiator |
| Unified multi-domain — no one covers 2 of 8 segments well | Enabler vertical-aware capability registry |
04Direct-competitor platform tier
| Capability | SP | Golioth | RainMaker | Balena | Blues | Bytebeam |
|---|---|---|---|---|---|---|
| Firmware security scanner | Yes | No | No | No | No | No |
| SBOM generation | Yes | No | No | No | No | No |
| CRA compliance evidence | Yes | Guidance | No | No | No | No |
| Firmware generation | Yes | No | No | No | No | No |
| AI anomaly detection | Yes | No | No | No | No | Basic |
| Built-in dashboards | Yes | No | Basic | Mgmt | No | Yes |
| OTA updates | Yes (now built) | Yes | Yes | Containers | Yes | Yes |
| MCU support | ESP32/STM32/RAK | Multi | ESP32 only | No (Linux) | Any | ESP32/Linux |
| Cellular built-in | In progress (Cavli) | No | No | No | Yes | No |
| Free tier | Open decision | Yes | Yes | Yes | Yes | No |
SP's unique combination: the only platform with firmware-gen + security scanner + SBOM + CRA + AI + dashboards — and now OTA. No competitor has more than 2–3 of these six. Remaining table-stakes to close: cellular (Cavli in progress) and a free-tier decision.
05Differentiation — do not sell a commodity sensor
- CRA-security in silicon — secure boot v2, HSM-signed OTA, SBOM. Expensive to do right → that's the moat; commodity vendors can't match it. CRA obligations hit Sept 2026 (reporting) → Dec 2027 (full); EU enterprise buyers are writing CRA into procurement now. A ~24-month structural lead.
- Compliance dashboard as a service — audit-ready docs, SBOM tracking, 24h/72h incident pipeline. The sticky, recurring-revenue layer no sensor vendor offers.
- Vertical depth — clinical / pharma cold chain (Ventrix), where GxP + CRA + cold-chain is one airtight story.
- Wired AND wireless on one stack + one dashboard — enterprises need both. One security core, one pane of glass beats stitching three vendors.
06Wired protocols — make-vs-buy (verified Jul 2026)
Don't pre-buy protocol stacks. Production-grade, royalty-free implementations exist for all three. Budget $0 for protocol libs; reserve spend for BTL / OPC-UA indemnity only when a customer spec forces it.
| Protocol | Free stack (C) | License | Pay only for |
|---|---|---|---|
| BACnet | bacnet-stack (Karg) | GPL-2.0 + linking exception (commercial-OK) | BTL cert — only when a device spec demands the mark ($150/hr metered; ~$10–15k all-in for a full profile). A gateway doing translation usually needs none. |
| Modbus | libmodbus | LGPL-2.1+ | Nothing meaningful — freest of the three |
| OPC-UA | open62541 | MPL-2.0 (free commercial) | Indemnified SDK (Unified Automation / Prosys) only if a contract demands support/liability; cert optional |
Python connectors (bacpypes3 / pymodbus / asyncua) are equally shippable. These OSS stacks enter your SBOM → track their CVEs under CRA.
07Pricing playbook
- Publish per-device pricing — Density is the only Smart Buildings vendor doing it; near-universal opacity makes this a structural differentiator.
- Avoid 36-month lock-in — Samsara's is the most-cited customer pain; 1-year minimum is the modern norm.
- Bundle HW + SW where the customer can't BYO-hardware.
- Tiered Starter/Pro/Enterprise ladder, not "call sales" (genuinely rare).
Incumbent price anchors: Smart Buildings $50K–500K+/yr · Industrial $5K–50K/yr/machine · Agriculture $150–900/sensor + $200–400/yr · Water software $3K–6K base.
08Go-to-market sequence
1Beachhead
Cold-chain temp/RH (Ventrix Vault). Biggest market (~$8B), hardest regulation, CRA + GxP airtight, and incumbents don't offer OTA or a unified environmental+RTLS view. Win on security + OTA + compliance dashboard + transparent pricing.
2Extend
Same CRA platform → IAQ (UltraDetekt/Danum) and location/RTLS. Same security core, same dashboard, new sensor families.
3Wired
BACnet/Modbus/OPC-UA gateway (free stacks) into hospital BMS / industrial. No protocol-license spend until a spec forces BTL.
Don't enter (from M&A / failure analysis)
Vertical farming (Plenty, Bowery, AppHarvest — Ch. 11) · SEA agritech short-term (eFishery fraud aftermath) · smart-city-as-a-platform (most fragmented, Cisco exited) · defense IoT casually (rich but restricted — long-term option, not Year 1).
09Risks / watch-list
- Markets are crowded — never compete as a generic sensor; win on CRA-security + vertical + dashboard.
- CRA compliance is the moat and the burden — the cost keeps commodity vendors out, but it's real engineering spend (CVE tracking on OSS deps, 24/72h incident pipeline).
- BTL cost gates BACnet-device (not gateway) plays — trigger only on spec demand.
- Cellular + free-tier are the remaining table-stakes vs. the platform-tier competitors — close cellular via Cavli; decide the free-tier question deliberately.