In line with our commitment to providing top-notch security for our modules, we have joined forces with Finite State, the US-based leader in enterprise software supply chain risk management. Through this collaboration, we aim to reinforce the security of our modules by subjecting them to rigorous security testing, improving software supply chain visibility, and implementing comprehensive software risk management measures.
Threat protection: Our security-first approach enables device OEMs to defend against a wide array of security threats, ensuring their data and systems are secured.
Trustworthy connectivity: Our modules establish a trusted, secure connection, enabling seamless, secure wireless communication.
Future-proof solutions: Regular security updates, working with leading third-party security firms, and adapting to emerging threats keep your IoT deployments secure.
We provide regular transparency reports detailing the nature, number, and severity of vulnerabilities identified, along with our response timelines.
We implement top-tier data protection measures to ensure customer data is securely handled during device usage, storage, and transmission.
Quectel’s IoT modules are developed with security at the core. From product architecture to firmware/software development, we incorporate leading industry practices and standards, mitigating potential vulnerabilities from the get-go.
We don't just test our modules — we challenge them. Leveraging vulnerability assessments, penetration testing, static application security testing, software composition analysis, and other rigorous methodologies, we ensure our modules stand tall against potential threats.
Security is a journey, not a destination. We proactively address vulnerabilities by regularly releasing firmware and software updates to safeguard your IoT deployments.
Our secure hardware and software supply chain emphasizes component security and mitigates risks associated with tampering or counterfeit materials. We maintain close relationships with all third-party software suppliers to ensure the timely application of security updates and remediation.
We incorporate select security practices like generating SBOMs and VEX files as well as performing firmware binary analysis into our secure software development lifecycle.
Click here to access available SBOMs and VEX files.
Our IoT modules comply with global and regional security and privacy regulations. We actively collaborate with recognized certification organizations to foster a culture of compliance and customer trust.
| Quectel_ Pioneering Transparency in IoT Security through SBOM and VEX Documents | Updated: 2023-09-25 |  Download |
