← All platforms
MMender
The reference implementation of safe Linux updates — dual partitions, automatic rollback, and an honest open-source edition.
Linux OTAEmbedded LinuxBy Northern.techSince 2016Open source: Apache-2.0 (client + server)
- Type
- Linux OTA
- How it works
- Writes the new root filesystem to the inactive partition, reboots into it, and rolls back automatically if the device fails to check in. Delta updates and phased rollouts sit in the paid tiers; the update mechanism itself is open source and self-hostable.
- Targets
- Embedded Linux
- Deployment
- SaaS + self-hosted
- Rollback
- A/B partitions with automatic rollback on failed boot
- Pricing*
- OSS free; hosted from $34/mo · pricing page
- Free tier
- Yes
- Open source
- Apache-2.0 (client + server)
- Best for
- Linux fleets that must never brick
- Notable
- Hosted tiers self-serve to 2,000 devices
* Published list pricing at August 2026 (vendor pricing pages, August 2026), not a quote.
Strengths
- A/B rollback is the safest widely deployed model
- Genuinely usable open-source edition, not a crippled demo
- Self-host or hosted without changing the client
- Yocto and Debian integration is well trodden
Trade-offs
- Dual partitions cost you flash — roughly double the rootfs
- Not designed for constrained MCUs
- Delta updates and RBAC are paid-tier only
Visit Mender → Documentation
Listed for comparison as of August 2026 — not an endorsement, and Mender did not pay for placement. See disclosure.
Compare Mender with…