KoreLock says lock makers should buy, not build, most smart lock tech

KoreLock is urging lock manufacturers to rethink the build-vs-buy choice for smart lock platforms, arguing that most companies should buy the full stack rather than try to assemble it in-house. The Greenwood Village, Colorado, company says the real challenge is scaling, security, updates and operations after launch, not getting a demo lock to work.

Why it matters: - Smart lock makers face a costly decision that affects time to market, product reliability and long-term support. - KoreLock says many manufacturers underestimate the engineering, security and operations needed after a first demo works. - Lower-volume brands may not be able to justify building a full smart lock stack on their own.

What happened: - KoreLock published guidance for lock manufacturers and software companies weighing whether to build or buy a smart lock platform. - The Greenwood Village, Colorado company said it has spent a decade on the technology build side and learned lessons that can help guide that decision. - KoreLock framed the issue as a platform choice, not just a firmware or app choice.

The details: - KoreLock said the prototype is only about 10% of the work, while the remaining 90% is making the product work continuously on thousands of deployed devices. - Annual operating-system updates can break Bluetooth-based smart lock systems in the field. - Reliable over-the-air updates need staged rollouts, safe recovery and cryptographic verification. - Deployed fleets need monitoring that can distinguish real failures from false alarms, such as a user turning off Wi-Fi. - Credential support now spans PINs, cards, mobile keys and wallet credentials. - Apple and Google Wallet access requires lengthy certifications and approvals. - The emerging Aliro standard adds another compatibility requirement. - Mobile app maintenance is ongoing because operating systems and frameworks keep changing. - Power management is critical because smart lock systems must run on battery for a year while radios wake, sleep and advertise. - KoreLock said its patented Wi-Fi power control technology addresses part of that challenge. - KoreLock described a smart lock platform as 10 layers: embedded lock hardware, reader hardware, lock firmware, cloud infrastructure, credential ecosystem, device and cloud security, OTA management, partner APIs, white-label apps and factory and QA systems. - KoreLock said many of these layers require embedded engineering, RF design, manufacturing and ongoing operations, not just software.

Between the lines: - The message is aimed at manufacturers that may overvalue a working demo and undervalue the cost of sustaining a connected product over time. - KoreLock is positioning specialization and partnership as the practical alternative to building a full stack from scratch. - The company is also signaling that smart lock platforms are becoming harder to own alone as credential ecosystems, security requirements and certification demands expand.

What's next: - KoreLock said companies that do choose a platform partner should look for large-scale deployments, real OTA capability, complete credential support, reader hardware expertise, factory and test infrastructure, relevant certifications and responsiveness to product needs. - KoreLock said building only makes sense when a specific layer is part of a company’s core value or when the company is itself a platform business. - The company continues to market its B2B IoT smart lock platform for lock manufacturers and access control providers.

The bottom line: - KoreLock’s view is simple: if smart locks are the product, most companies should buy the platform and focus on what makes their lock different.