Your submission was sent successfully! Close

ROS Extended Security Maintenance

Hardened and long-term supported ROS environment

ROS ESM is your ally from beginning to end, from the improvement of user experience in the Robot Operating System (ROS) to the security maintenance of robots on the field. Don’t let anything stop your robot.

Get in touch

Read the whitepaper ‐ ROS support with ROS ESM ›

What is ROS ESM?

As your code develops and packages change, ROS needs to be continuously patched and updated, along with your other software dependencies. This time-consuming endeavour detracts from your robotics development. Duplicating and freezing upstream repositories is not a secure solution. Running un-patched and unmaintained versions of ROS exposes your robot, company and customers to serious risk. The challenge increases when working with End-Of-Life (EOL) ROS distributions or dependencies such as ROS Kinetic and Python 2.

Delivered in partnership with Open Robotics, ROS ESM provides a hardened and long-term supported ROS environment for your robot and its applications. With ROS ESM, you can count on backports for critical security updates, common vulnerabilities and exposures (CVE) fixes and bug fixes for ROS and Ubuntu base OS distribution.

Learn more about ROS ESM ›

Delivered in partnership with

Maintainer of the Robot Operating System and Gazebo

Security maintenance you can trust

No more waiting for a patch to be made available, a breach identified or a security expert available to patch your software stack. With ROS ESM, the time consuming and resource intensive work of keeping core ROS packages secure is no longer a problem.

Our security experts follow a standardised process to identify vulnerabilities, create and test security patches. The implemented testing infrastructure reduces the possibility of reintroducing the vulnerability, and also improves the compatibility with our ESM repository.

Get instant updates and trouble-free maintenance for you and your robotic users with ROS ESM.

Benefits of ROS ESM

Reduced attack surface

Running un-patched and unmaintained versions of ROS exposes both your robot and your customers to serious risk.

ROS ESM offers backported security fixes to your ROS environment for a long-term supported system beyond EOL.

Enterprise support

Tracking down community maintainers can prove challenging and does not guarantee a timely and high-quality fix.

ROS ESM gives you a single point of contact to log bugs and propose fixes. Get unparalleled support from the ROS and Ubuntu experts.

A Hardened ROS environment

Upstream ROS updates and packages can break backward compatibility (API and ABI breakage).

ROS ESM delivers security patches, eliminates API/ABI breakage, and fixes high and critical CVE fixes and bugs for ROS.


Whether you want to be compliant with cybersecurity regulations or reduce operational expenses of maintaining upstream repositories, ROS ESM is here to make your work easier.

ROS ESM offers:

  • Enhanced ROS stability for your working environment, through curated packages and dependencies that won’t break API/ABI
  • Backported security updates and Common Vulnerabilities Exposures (CVE) fixes both for your ROS distribution and its dependencies
  • Enterprise support to report bugs and propose fixes for ROS
  • Linux kernel and open source security updates for the Ubuntu base OS, key infrastructure components, like Ceph, OpenStack and Kubernetes, as well as open source applications, like PostgreSQL and NGINX

Extended Security Maintenance is only included for 64-bit x86 AMD/Intel installations.

Find out how it could work for you

Need answers on what ROS ESM can do for you?

Read our FAQ about ROS ESM ›

Get a hardened and long-term supported ROS environment

If you would like to discuss ROS ESM please get in touch.

Learn about our solutions