Blecon Network
The fabric the system runs on
Blecon Network authenticates devices, calculates positions in real time and routes data through standard integrations. The platform layer underneath every Blecon asset tracking deployment.
What Blecon Network does
Position is calculated in the Network, not on the device
Hotspots report the Tag signals they observe; the Network calculates position from those reports. The same architecture handles indoor and outdoor coverage, without GPS or line-of-sight requirements.
Positioning logic lives centrally, so improvements ship without firmware updates at the edge. Time is synchronised across the system, so reports from different Hotspots reconcile against a single reference. That includes the offline records uploaded by logger Tags on return, which slot into the same timeline as live data.
Identity and security live in the Network, not at the edge
Most BLE tracking systems push security to the gateway: keys to manage, firmware to patch, access to control at every installation. Blecon handles identity, authentication and encryption centrally, nothing security-critical lives on the device.
Cryptographic identity for every device
Every Tag and Hotspot carries a cryptographically signed identity, managed centrally by the Network. Devices are authenticated before any data is accepted. Onboarding and decommissioning happen in one place, across every site.
End-to-end encryption between Tag and cloud
Data is encrypted from the Tag to the cloud. Hotspots carry the encrypted payload but can't decrypt it, they're transparent relays. A compromised Hotspot leaks nothing.
Encrypted advertising
Blecon's NeoBeacon format uses AES-128 authenticated encryption and replay protection on every BLE frame. Device identifiers rotate, so signals can't be spoofed or replayed.
Zero security configuration at the edge
Because security sits between the device and the cloud, there's nothing to configure, patch or protect on the Hotspot. No keys to manage, no certificates to rotate, no security firmware to keep current.
Open routing at the platform layer
Network events route out via standard cloud integrations; HTTP webhooks, AWS S3, SQS and EventBridge. Blecon Track consumes these events to drive its operational layer (zones, rules, alerts) and routes its own exception events to WMS, TMS or incident tools from there.
Enterprise deployments can also build directly on the Network API, with different event types routing to different destinations as needed.
Managed across sites from one place
The Blecon Console manages the Network layer across every site from a single interface; creating networks, registering devices in bulk, configuring routing and monitoring activity. Each Network tunes independently for update frequency, accuracy targets and data collection windows.
Blecon is designed for Builders
Blecon provides secure Hotspot and Network infrastructure services, supporting development with off-the-shelf or custom & embedded Beacons while giving you full control over where your data lands.
Blecon integrates effortlessly with any cloud service. Whether it’s a dedicated data platform, your backend on AWS, Azure, Google Cloud, or any other infrastructure you choose, you remain in full control of your data, infrastructure, and business logic.
Run a pilot in days, not months
An eval kit gets you everything you need to run a pilot. Tags, the platform and Blecon Agent for your devices.