Embedded software consultancy · UK

Safe and secure embedded software, done right.

Codemark Labs develops and reviews automotive-grade embedded software: functional safety to ISO 26262 under ASPICE processes, cybersecurity to ISO 21434 with Cyber Resilience Act readiness, Infineon AURIX expertise and AI-assisted engineering workflows.

Discuss your project → Get CRA-ready
Functional safety Cybersecurity Software quality
ISO 26262Automotive SPICEIEC 61508ISO 21434Cyber Resilience ActMISRA CAURIX TC2x · TC3x · TC4x
What we do

Engineering where quality isn't optional

Specialist support for teams building embedded software that has to be safe, secure and auditable.

Safety-critical software development

Embedded software developed in line with ISO 26262 and following Automotive SPICE processes, with traceable requirements, design, verification and the work products assessors expect.

ISO 26262ASPICEIEC 61508ISO 21434

Infineon AURIX expertise

Hands-on experts across TC2x, TC3x and TC4x: bare-metal drivers, peripheral bring-up, safety mechanisms, self-test libraries and BSW integration, from first silicon to production.

TC2xTC3xTC4xSMU · LockstepCAN FD/XL · Ethernet

AI in embedded workflows

Practical consultancy on bringing AI coding agents into embedded teams: driver boilerplate, test automation and static-analysis triage, with review, verification and safety-process guardrails built in.

AI coding agentsTest automationProcess integration

Software quality & MISRA

MISRA compliance, static analysis and code reviews that hold up to audit, whether you need to clean up a legacy codebase or set up a quality process that keeps new code clean.

MISRA CPolyspacePC-lintCode review
Connected products

Get ready for the Cyber Resilience Act

Makers of connected products sold in the UK and EU now face binding cybersecurity rules. For smaller manufacturers of e-bikes, e-scooters and light EVs, that means secure boot, signed updates and a documented approach to risk, alongside motor control that is safe by design.

Apr 2024
UK PSTI regime in forceSecurity requirements for consumer connectable products sold in the UK.
Sep 2026
CRA reporting obligationsActively exploited vulnerabilities and serious incidents must be reported.
Dec 2027
CRA main obligations applyProducts with digital elements must meet the essential cybersecurity requirements to be placed on the EU market.

Product cybersecurity, engineered in

Practical, engineering-led support grounded in automotive cybersecurity practice under ISO 21434.

  • Threat analysis and risk assessment (TARA) at ECU level and at software component level, producing cybersecurity goals and requirements you can trace and test.
  • Secure boot and chain of trust, from the hardware security module through bootloader to application.
  • Signed, robust firmware updates, over the air or in the workshop, with rollback protection and fail-safe recovery.
  • Safety-relevant motor control developed with functional safety and security considered together.
  • CRA and PSTI readiness: gap analysis, vulnerability handling process and the technical documentation behind your conformity assessment.
  • Reference secure-update designs that give your team a proven starting point instead of a blank page.
Ideal for: e-bike, e-scooter and light-EV makers, and other small manufacturers of connected embedded products.

We provide engineering support, not legal advice. Regulatory dates as published by the UK government and the European Commission.

How we work

Process-driven, from requirement to target

Every engagement follows a disciplined V-model approach, so the evidence is ready when you need it.

Requirements

Clear, testable software requirements traced back to system and safety goals.

Architecture & design

Designs that address freedom from interference, timing and resource limits.

Implementation

MISRA-compliant C, continuously checked by static analysis.

Verification

Unit, integration and on-target testing, with coverage and full traceability.

About

Built on a decade of automotive engineering

Codemark Labs was founded by Horia Opris, a senior embedded software engineer with over 10 years of experience in automotive software, functional safety and cybersecurity, specialising in Infineon AURIX microcontrollers.

Horia has delivered safety-qualified libraries, low-level drivers and BSW integration under ISO 26262, IEC 61508 and ISO 21434. Highlights include designing and implementing a widely adopted self-test library for AURIX TC3x used in production automotive systems, and leading end-to-end software for an AURIX TC4x aerospace prototype, bringing up every major peripheral from PCIe and Gigabit Ethernet to CAN XL.

Horia was also an early adopter of AI coding agents in embedded development, using them to speed up peripheral bring-up, test automation and MISRA triage while keeping every change reviewed, statically analysed and verified on target.

2021 – present

Embedded engineering consultancy

AURIX safety libraries, TC4x bring-up, AI-assisted workflows.

2018 – 2021

Vehicle manufacturer (OEM)

BSW supplier management, integration, requirements and verification.

2016 – 2018

Tier 1 automotive supplier

Ultra-low-power TPMS firmware on tightly constrained hardware.

Get in touch

Have a project in mind?

Whether you need AURIX expertise, help with ISO 26262 and ASPICE, a TARA or CRA readiness review, a MISRA clean-up or a plan for bringing AI into your embedded workflow, let's talk.

Email us → LinkedIn