Search in any browser for “IoT security”, and the results will most likely refence security frameworks, IoT and OT monitoring, data protection, hardware devices, and middleware. But amidst all of this very useful technology it is easy to overlook the endpoints – the physical computing devices that perform a function or task as a part of an internet connected product or service, such as wearable fitness devices, industrial control systems, automotive telematics units, and home heating thermostats. Secure endpoint software development is a key component of any defence in depth strategy.