About and method

Device Safety Record brings together the public security and safety record of devices people put in their homes. We are independent and not affiliated with CISA, CPSC or any manufacturer.

Security flaws

We use CISA's Known Exploited Vulnerabilities catalog (version 2026.10.28). We include entries for home and small office routers and network gear (including Cisco small business RV routers, but not business firewalls or network management software), IP cameras and video recorders, and network storage and media servers. For makers that also sell other products, we place each entry by the product name CISA gives and leave out entries that are not one of these device types. The flaw names and descriptions are CISA's.

Recalls

We use the CPSC recalls API for recalls dated 5 January 2023 to 22 October 2026. A recall appears here if a product name CPSC lists contains words for the device groups listed on the recalls page. Each recall links to CPSC's notice, which has the models, remedy and contact details.

What we do not do

We do not score or rate makers. Lists sorted by number of entries are only counts. A count of listed flaws reflects how many of a maker's devices are in use and studied as well as how secure they are. We do not test devices ourselves.

Corrections

If an entry is wrong or a maker has published a fix we do not link to, email corrections@devicesafetyrecord.org and we will check it against CISA or CPSC and update the page with the date. We never accept payment to change, add or remove anything, and we do not remove entries at a maker's request.

Sources

Checked 29 October 2026.