TL;DR
UL Solutions has stepped down as the lead administrator of the US Cyber Trust Mark Program, raising questions about the program’s continuity less than a year after its public launch. The FCC had been probing the initiative over alleged ties to China, and the certification mark has yet to appear on any products.
What happened
The US Cyber Trust Mark Program, announced in 2023 as an Energy Star–style label for smart home device security, is in uncertain territory after UL Solutions withdrew as the program’s lead administrator. The program debuted publicly at CES 2025 but has not produced any certified products bearing the mark. The Federal Communications Commission had opened an inquiry into the program months earlier, focusing on alleged connections to China; that probe and UL Solutions' departure occurred within a short timeframe of one another. The program has not been officially terminated, but losing its administrator leaves it without a clear operational path forward. The FCC previously took other notable cybersecurity actions this year, including rolling back certain telecom security rules after the 2024 Salt Typhoon hack and decertifying testing labs it deemed problematic. The FCC did not immediately respond to requests for comment about the program’s status.
Why it matters
- A national label for smart home security aimed to create clearer product standards and consumer guidance.
- Without a functioning administrator, certification processes and enforcement of standards may stall.
- Regulatory scrutiny tied to international concerns could affect future testing and lab accreditations.
- Delay or collapse of the program may slow industry adoption of uniform cybersecurity benchmarks for consumer devices.
Key facts
- UL Solutions announced it is stepping down as the Cyber Trust Mark Program’s lead administrator.
- The FCC had begun investigating the program over alleged ties to China several months before UL’s withdrawal.
- The Cyber Trust Mark Program was announced in 2023 and launched publicly at CES 2025.
- No products have yet been seen carrying the Cyber Trust certification shield.
- The program has not been officially shut down, but its future is unclear after the administrator’s exit.
- Earlier in the year the FCC rolled back certain telecom cybersecurity rules following the 2024 Salt Typhoon hack.
- FCC Chair Brendan Carr scrutinized testing labs this year and decertified some labs based in China.
- The FCC did not immediately reply to requests for comment about the program’s future.
What to watch next
- Whether the FCC or another body appoints a new lead administrator for the Cyber Trust Mark Program — not confirmed in the source.
- If and when certified devices begin carrying the Cyber Trust shield on packaging — not confirmed in the source.
- Any formal announcement from the FCC about shutting down or continuing the program — not confirmed in the source.
Quick glossary
- Cyber Trust Mark Program: A federal initiative intended to certify that smart home devices meet defined cybersecurity standards, similar in concept to Energy Star labels for energy efficiency.
- UL Solutions: A safety testing and certification company that was serving as the lead administrator for the Cyber Trust Mark Program.
- Federal Communications Commission (FCC): The U.S. government agency that regulates interstate and international communications and oversees certain aspects of telecommunications and related cybersecurity policies.
- Energy Star: A voluntary label program that identifies energy-efficient products; used here as an analogy for how the Cyber Trust mark would signal cybersecurity compliance.
Reader FAQ
Is the Cyber Trust Mark Program officially closed?
Not officially; the program’s future is unclear after UL Solutions stepped down as lead administrator.
Why did UL Solutions quit as administrator?
The source reports UL Solutions announced its departure, and that the FCC had been investigating the program over ties to China, but a direct cause for UL’s decision is not confirmed in the source.
Are any products currently certified with the Cyber Trust mark?
No products have been reported as carrying the certification mark yet.
Has the FCC commented on the program’s status?
The FCC did not immediately respond to requests for comment according to the source.
NEWS POLICY TECH The FCC has probably killed a plan to improve smart home security The future of the Biden admin’s Cyber Trust Mark Program is in doubt after its…
Sources
- The FCC has probably killed a plan to improve smart home security
- FCC investigation could derail its own IoT security …
- CTIA Certification Withdraws From FCC's Cyber Trust Mark …
- Former Biden cyber chief defends Cyber Trust Mark in the …
Related posts
- curl eliminates strcpy usage, extending its earlier strncpy ban
- Times New American: State Department’s Typeface Swap and Its Meaning
- curl bans strcpy too, replacing it with a checked memcpy-based curlx_strcopy helper