2024 IoT Security Excellence Award Winner: Quectel

The winner of the 2024 IoT Security Excellence Award is Quectel for their groundbreaking program that redefines security standards across the IoT product lifecycle. Their comprehensive approach—from rigorous penetration testing to transparent software management—sets a new benchmark in safeguarding IoT devices and ecosystems.

Revolutionizing IoT Security

Quectel’s commitment to IoT security begins with their collaboration with penetration testing and analysis specialists at Finite State. This rigorous testing process reveals detailed risk profiles of Quectel’s IoT modules, ensuring continuous security enhancements. Over the course of six months, Quectel achieved a remarkable improvement in their modules’ security scores—from 33 to an industry-leading score of less than 18. These figures stand in stark contrast to the industry average of 98, exemplifying Quectel’s dedication to excellence.

Setting a Precedent with SBOM and VEX Documentation

Quectel’s release of Software Bill of Materials (SBOM) and Vulnerability Exploitability Exchange (VEX) documents marks an industry-first among IoT module manufacturers. These resources provide developers with critical, machine-readable insights into the security profiles of Quectel’s modules. By detailing software components, dependencies, and licensing information, SBOMs empower developers to identify vulnerabilities quickly and efficiently. The VEX files provide ongoing updates on the status of vulnerabilities, ensuring proactive risk management.

Transforming the IoT Ecosystem

Quectel’s innovations are not confined to their own products; they cascade throughout the IoT ecosystem. By ensuring transparency and robust security measures, Quectel’s modules bolster the resilience of countless IoT devices built on their platforms. This initiative has profound implications for industries relying on IoT, from healthcare to manufacturing and beyond.

Vision for the Future

Quectel’s threefold approach to IoT security reflects a visionary commitment:

• Comprehensive security testing leveraging automated and manual methods.
• Unprecedented transparency with SBOMs for each product.
• Integration of Finite State’s binary analysis tools into their development lifecycle, enabling robust DevSecOps practices.

As IoT security challenges grow, Quectel’s initiatives pave the way for scalable, secure, and trustworthy IoT solutions. Their contributions exemplify what it means to lead in the interconnected age.

Congratulations to Quectel on winning the IoT Security Excellence Award and setting a stellar example for the industry. Explore their innovative solutions and learn how they’re shaping the future of secure IoT ecosystems.

Learn More:

• Read about Quectel IoT Security
• Visit the Quectel Website

For more details on Quectel and its impact, view the press release here.

• Who is eligible to participate?

The awards are open to all products, companies, organizations, and individuals involved in producing IoT products, solutions, and services. Nominations must have been produced, released, updated, or announced in the calendar year.

• How are the awards judged?

Entries are evaluated by a panel of experts based on criteria specific to each category. Judges look for creativity, innovation, impact, and contributions to the IoT ecosystem.