Small IoT devices are inherently brittle to program due to lack of memory protection, limited resources, and only a thin layer of operating system support. A runtime memory access error will, at best, make your IoT device crash and reboot. We believe this makes them unattractive to programmers and therefore stifles IoT innovation. We have designed Toit, a new software platform that turns IoT devices into ‘real’ robust computers: easy to program, safe execution environment, flexible, upgradable, and recoverable. This talk will first discuss why we had to implement a new programming language and then how Toit makes IoT devices accessible to high-level programmers. Finally, we will demonstrate how Toit can orchestrate a fleet of devices.