Quectel Wins the 2026 IoT Security Excellence Award

Why Quectel Won

Quectel earned the award for treating security as an operational system rather than a collection of isolated controls. Each part of its Security Capability Infrastructure supports a different stage of the product lifecycle, while the program as a whole gives customers clearer evidence of how security risks are identified, prioritized, remediated, and communicated.

Independent evaluation is a central part of that approach. Quectel maintains an ongoing relationship with Finite State for source-code auditing, firmware analysis, and penetration testing. Finite State has reported that Quectel modules perform significantly better than the industry average, providing external validation beyond Quectel’s internal engineering and security processes.

The program also establishes formal accountability for vulnerability response. Quectel’s PSIRT follows a structured process for receiving reports, confirming technical findings, coordinating remediation, disclosing information to affected customers, and monitoring issues after resolution. Its vulnerability disclosure platform provides customers and researchers with a dedicated channel for reporting and reviewing security information.

For software supply-chain assurance, Quectel monitors third-party and open-source components, tracks public vulnerability sources, and prioritizes fixes according to severity. Software Bills of Materials and Vulnerability Exploitability Exchange documents give customers greater visibility into embedded components and the status of known vulnerabilities.

Security excellence is not defined by a single test, certificate, or control. Quectel earned this recognition by connecting independent assessment, coordinated incident response, software supply-chain transparency, cryptographic governance, and certified development practices into one operational system. That lifecycle-wide discipline gives customers clearer evidence that security is being managed before deployment and after products reach the field.

About Quectel’s Security Capability Infrastructure

Quectel provides cellular, GNSS, satellite, Wi-Fi, Bluetooth, and other technologies used across connected-device ecosystems. Because its modules can become foundational components within products deployed across industries and markets, the security of those modules can influence the security posture of a much broader IoT supply chain.

Quectel’s Security Capability Infrastructure is designed to manage that responsibility across the entire product lifecycle. Independent assessment identifies and measures technical risks. PSIRT operations provide a disciplined path for responding to reported vulnerabilities. The public disclosure platform and customer-facing security documentation improve transparency, while supply-chain monitoring helps identify risk within third-party and open-source components.

The program also includes dedicated secret key management supporting secure boot, authentication, firmware signing, and data protection. Protecting those keys helps preserve the cryptographic identity and integrity of devices and software throughout development and deployment.

Quectel reinforces these technical and operational capabilities through certifications covering information security, privacy, automotive cybersecurity, and secure product development. Its portfolio includes ISO/IEC 27001, ISO/IEC 27701, ISO/SAE 21434, and IEC 62443-4-1 certification.

By coordinating assessment, remediation, disclosure, supply-chain visibility, cryptographic governance, and certification, Quectel provides a security foundation intended to remain active as products evolve, regulations change, and new vulnerabilities are discovered.

A Fourth Consecutive Year of IoThinkTank Recognition

The 2026 IoT Security Excellence Award is Quectel’s eighth individual IoThinkTank award. The company received five honors in the Best of 2023 Awards, including IoT Breakthrough of the Year for Wi-Fi HaLow and the Overall Winner and IoT Excellence Award.

Quectel then won the 2024 IoT Security Excellence Award for advancing independent module testing, SBOM and VEX transparency, and DevSecOps integration. In 2025, its LG290P (03) high-precision GNSS module received the IoT Smart City Solution Award.

This year’s recognition returns to security while reflecting a broader level of maturity. The 2024 award focused on the testing and software-transparency foundations Quectel was establishing. The 2026 award recognizes how those foundations have expanded into a coordinated infrastructure spanning assessment, response, disclosure, supply-chain assurance, cryptographic key management, and certification.