optim/enterprises · AS207819

Sovereign infrastructure.
Carrier-grade engineering.

We run managed sovereign cloud, NVR, LLM inference, eCommerce, and a global ACS for telcos and enterprises — plus the wireless and camera firmware that runs on the boxes underneath. One vendor, one stack, one accountability line.

Talk to engineering →See the services
4.21M
managed devices
via global ACS
99.998%
uptime
control plane · trailing 90d
6
PoPs
3 continents
ops.optim.live
$ acs --list --format=table --tailuptime 99.998% · 0000
devicemodelsiterssiuptime
00:1A:11wlan-ap/ax6000ams-1-5284d 02h
44:9D:32openwrt/ipq6018fra-2-6712d 17h
AC:1F:6Brdkb/cgm4331lon-3-7106d 09h
DC:2B:2Aplume/superpodsin-1-5831d 04h
F8:1A:67openwifi/ap2300syd-1-6301d 22h
5 of 4,210,118 devices · refresh 1.4s→ live tail
live fixture · sample telemetry · refreshes every 1.4s
AS207819 · 4.21M ACS devices onlineTalos clusters across ams · fra · lon · sin · syd · iad99.998% control-plane availability — last 90dCarrier-grade SLA · 24/7 on-call · contractually backedOpenWrt · OpenWiFi · RDK-B · Plume — single pane of glassLLM gateway · zero-retention · EU-only inference availableAS207819 · 4.21M ACS devices onlineTalos clusters across ams · fra · lon · sin · syd · iad99.998% control-plane availability — last 90dCarrier-grade SLA · 24/7 on-call · contractually backedOpenWrt · OpenWiFi · RDK-B · Plume — single pane of glassLLM gateway · zero-retention · EU-only inference available
────[01]services · managed platforms────────

Five platforms.
One operations team.

Each service runs on the same Talos-on-bare-metal foundation we operate for our telco customers. You get a managed SaaS API; we carry the pager.

01/07
// Sovereign Cloud

Managed Talos IaaS

Kubernetes the way infrastructure people would build it. Immutable Talos OS, Cilium-routed pods, your data in your jurisdiction, our 24/7 SREs on the keyboard.

  • Talos Linux 1.14
  • ·Cilium L7 / mTLS
  • ·99.99% SLA
See architecture
02/07
// Video

Cloud NVR

Camera-agnostic video pipeline. ONVIF + RTSP ingest, GPU-accelerated transcoding, retention you actually control, exports that are auditable.

  • RTSP / ONVIF
  • ·GPU transcode
  • ·90d default retention
See spec sheet
03/07
// AI

Private LLM gateway

Inference for teams that won't ship prompts to the US. Self-hosted open-weights and curated EU-hosted commercial models behind a single OpenAI-compatible endpoint.

  • mistralrs-oxide
  • ·OpenAI-compatible
  • ·Zero retention
See model list
04/07
// eCommerce

Managed storefront

Headless commerce stack we wire up, host, and operate. Stripe + PSPs, multi-currency, ERP webhooks, the boring infrastructure done right so your merchants don't see it.

  • Headless cart
  • ·Stripe · Adyen · PayPal
  • ·ERP webhooks
See platform
05/07
// Device management

Global ACS

TR-069 + TR-369 (USP) at telco scale. Fleet up to millions of CPEs, multi-tenant by MSO, firmware campaigns with health-gated rollouts. Speaks OpenWrt, OpenWiFi, RDK-B, Plume.

  • TR-069 / USP
  • ·Multi-tenant
  • ·4M+ device fleet tested
See compatibility
// engineering services
06–07 / 07

Firmware engineering, on contract.

Wireless and camera firmware for OEMs and MSOs. SDKs, BSPs, RDK-B integrations, ONVIF stacks, security hardening, and CI you'll actually use.

────[01a]engineering · wireless firmware────────
802.11ax · 802.11be · TR-369 · prplOS

From silicon
to subscriber,
on contract.

We have shipped OpenWrt, OpenWiFi, prplOS and RDK-B images at carrier scale — from MediaTek Filogic to Qualcomm IPQ to Broadcom BCM. Bring-up, BSP, radio tuning, mesh, security hardening, OTA. The kind of firmware that does not page support at 3am.

> fleet observed
802.11be devices 187,402
EasyMesh nodes paired 2.1M
avg image size 18.4 MiB
CVE backports / qtr 62
OTA success rate 99.71%
// platforms

Distributions we ship

  • OpenWrt 23.05 · 24.10 · trunk
  • OpenWiFi 3.0+ (TIP, ucentral)
  • prplOS 4.x — TR-181/USP native
  • RDK-B 2024q2 (Comcast Yocto)
  • Vendor SDKs: MTK / QCA / BRCM
// silicon

SoCs in active rotation

  • MediaTek MT7986 · MT7988 (Filogic 880)
  • Qualcomm IPQ9574 · IPQ5332 · NSS
  • Broadcom BCM47622 · BCM4912
  • Realtek RTL8198D · RTL8198C
  • Marvell Octeon TX2 (router class)
// radio

Wi-Fi 6E / 7 in production

  • 320 MHz channel ops, MLO STR + EMLSR
  • Tri-band steering with 11k/v/r hooks
  • 6 GHz AFC client integration
  • OFDMA/MU-MIMO tuning per OEM SKU
  • RRM exports to ACS for self-optimisation
// mesh + ops

Mesh you can actually run

  • EasyMesh R3 controller + agent
  • Fronthaul / backhaul SLA telemetry
  • Roaming hand-off < 80ms median
  • prpl backhaul w/ rate adaptation
  • Telegraf / OWMA streaming exports
// security

Hardening built in, not bolted on

  • WPA3-SAE-PK + OWE transition
  • DPP (Easy Connect) onboarding
  • Signed boot · dm-verity root
  • HostAP CVE backport pipeline
  • Per-SKU SBOM + CycloneDX export
// ci + ota

Build pipeline that survives audits

  • Per-SKU buildroot, layers locked by SHA
  • Signed manifests · reproducible images
  • OTA via TR-369 USP + plain HTTPS fallback
  • Health-gated rollouts (5% → 25% → 100%)
  • Automatic rollback on KPI regression
//references and SoC support matrix shared under NDA — request a brief →
────[01b]engineering · camera firmware────────
ISP · H.265 / AV1 · ONVIF · WebRTC · SRT

RTSP that survives
the field.

ISP tuning that holds in evening light. Multi-stream encoders that don't drop frames under WAN jitter. ONVIF stacks that actually pass conformance. We ship firmware for IP cameras, ANPR, body-worn, doorbell and purpose-built industrial optics — from the bring-up to the NVR pairing.

> fleet observed
cameras in active SKUs 412
encode pipelines shipped 14
ONVIF Profile passes S · T · M · G
end-to-end latency 180–240 ms
cold-boot to first frame < 2.6s
// platforms

SoCs in active rotation

  • HiSilicon Hi3516CV500 · Hi3519AV100
  • SigmaStar SSC325DE · SSC335DE · SSC338
  • Ambarella CV2 · CV5 · CV5S (AV1)
  • Ingenic T31 (TFLite-micro on-edge)
  • Realtek RTS3915 · RTS3917
// isp

Image pipeline we tune

  • 3A (AE / AWB / AF) with scene presets
  • WDR + HLC + BLC, evening / IR curves
  • Lens shading + geometric correction
  • Tone-mapping authored per OEM SKU
  • ANR / 3DNR with motion preservation
// encode

Video stacks we ship

  • H.264 / H.265 hw-encode, multi-stream
  • AV1 on CV5 (10-bit, 4K30 fp16)
  • Audio: AAC-LC, G.711, Opus over RTP
  • Smart codec — ROI bitrate cuts 40–60%
  • GOP / IDR alignment for NVR replay
// streaming

Out the wire

  • RTSP/RTP over TCP + UDP w/ retransmit
  • ONVIF Profile S/T/M/G — full conformance
  • WebRTC preview for browser-direct ops
  • SRT for telco backhaul (loss > 3% OK)
  • MQTT events for analytics + ACS hooks
// edge ai

Models on the device

  • TFLite-micro on T31 / TFLite on CV5
  • COCO person / vehicle / package detect
  • ANPR (EU + LATAM plates) + OCR
  • Face blur for GDPR public-deploy
  • ROI feedback into the smart encoder
// security

Hardening built in, not bolted on

  • Signed boot · dm-verity · no telnet
  • No factory backdoor, period
  • TLS 1.3 only for management
  • Signed evidence chain for export
  • Per-SKU SBOM + CVE response SLA
//ONVIF + conformance reports and BSP availability shared under NDA — request a brief →
────[02]solutions · by customer shape────────

Tell us who you are.
We'll tell you which stack.

Services compose. ISPs combine ACS + sovereign IaaS. Enterprises combine LLM + eCommerce + NVR. OEMs combine firmware engineering + device management.

// carrier · multi-tenant

For ISPs & MSOs

Operate your subscriber fleet without an in-house TR-069 stack.

  • Global ACS
  • Managed Talos IaaS
  • Wireless firmware on contract
Talk to us about this
// regulated · eu-resident

For Enterprises

Sovereign alternatives to US SaaS, with the same developer surface.

  • Private LLM gateway
  • Cloud NVR
  • Managed storefront
Talk to us about this
// firmware · supply chain

For Hardware OEMs

We ship the bring-up, the BSP, and the ops that comes after.

  • Wireless firmware
  • Camera firmware
  • Global ACS
Talk to us about this
────[03]pricing · honest engineering math────────

Pricing that's a spreadsheet,
not a slot machine.

IaaS, NVR, and LLM are public. Firmware engineering and global ACS are sized by fleet — fill the form, you'll get a quote in two business days.

tier · starter
€89/month

Single-AZ, 1 cluster, our shared NVR pool, 50K LLM tokens included. Good for proof-of-concept and small-team SaaS.

  • 1 Talos cluster · 3 nodes
  • 10 NVR cameras
  • 50K LLM tokens / month
  • Business-hours support
  • 99.9% uptime SLA
Start a trial →
Most teams pick this
tier · operate
€690/month

Multi-AZ HA, dedicated NVR worker, expanded LLM quota, 24/7 on-call. Most teams pick this tier within 90 days.

  • 2 Talos clusters · HA control plane
  • 100 NVR cameras
  • 2M LLM tokens / month
  • 24/7 on-call · 30-min response
  • 99.99% uptime SLA
  • Dedicated Slack channel
Talk to engineering →
tier · enterprise
Custom

Multi-region, dedicated infrastructure, contractually-backed SLAs, regulatory paperwork done for you. Engagement starts with an architecture review.

  • Dedicated bare-metal pool
  • Unlimited NVR cameras
  • Private LLM endpoints
  • Single-tenant control plane
  • Custom SLA + DPA
  • Quarterly architecture review
Request architecture call →
// custom-sized

Global ACS and firmware engineering are priced per fleet / per program.

Request a quote →
────[04]company · who we are────────

Engineers all the way down.

optim enterprises is a Netherlands BV that operates managed infrastructure for telcos, MSOs, and regulated enterprises. We are AS207819. We sit between Tier-1 transit and the customer edge and we have done both jobs.

The teams that ship firmware here are the same teams that operate the cloud that runs your fleet's control plane. There is no SDR layer between you and the people on call when a chipset throws an oops.

Legal
optim enterprises B.V.
Reg.
KvK · NL
ASN
AS207819
RIR
RIPE NCC member
PoPs
AMS · FRA · LON · SIN · SYD · IAD
// start the conversation

Talk to engineering, not sales.

Drop your name, what you're building, and a contact channel. A human who ships code will reply within one business day.

PGP key available on request