As AI-driven cyber threats surge and cybersecurity regulations tighten, secure by design is no longer optional
Zyxel Networks, a leader in secure, AI-powered cloud networking solutions, has unveiled an enhanced product security governance framework, reinforcing its long-term commitment to helping small and medium-sized businesses (SMBs) and managed service providers (MSPs) navigate an increasingly complex cybersecurity and regulatory landscape.
As the EU Cyber Resilience Act (CRA) raises the bar for product accountability by requiring transparent and verifiable security governance throughout the entire product lifecycle, organisations are under greater pressure to adopt trusted technologies. At the same time, research from Mandiant identifies software exploits as the leading initial attack vector, with threat actors increasingly using artificial intelligence (AI) to accelerate attacks. For resource-constrained SMBs and MSPs, partnering with vendors that demonstrate mature security governance has never been more critical.
Turning Secure by Design into an Operational Commitment
Rather than treating cybersecurity as an afterthought, Zyxel Networks embeds Secure by Design principles throughout product development, vulnerability management, and lifecycle governance through three key commitments.
Secure by Design Across Products and Services
As the first company in Taiwan—and the first global SMB networking vendor—to sign the Cybersecurity and Infrastructure Security Agency (CISA) Secure by Design pledge, Zyxel Networks continues to introduce security initiatives that help SMBs reduce operational risk while simplifying secure deployment.
These initiatives include passwordless login support for Zyxel accounts and Multi-Factor Authentication (MFA) across the company’s product portfolio and extended services, including wireless access, administrator logins, and remote VPN access. Zyxel also aligns with CISA’s core principles by eliminating default passwords and proactively reducing entire classes of vulnerabilities during product development.
Industry-Leading Security Governance
For nearly a decade, the Zyxel Group’s Product Security Incident Response Team (PSIRT) has worked closely with global security researchers through a transparent Vulnerability Disclosure Policy and a coordinated vulnerability remediation process.
The Zyxel Group has also earned recognition for its rigorous security governance standards. It is among the select networking industry CVE Numbering Authorities (CNAs) to achieve dual Provider Acceptance Levels, joining industry leaders such as Cisco, Juniper, and F5. More recently, the company became a full member of the Forum of Incident Response and Security Teams (FIRST), further strengthening its ability to collaborate globally on coordinated vulnerability response and cybersecurity incident management.
Transparent Product Lifecycle Management
To help customers minimise long-term security risks, Zyxel Networks maintains a transparent product lifecycle management policy that ensures products receive timely security updates and ongoing support based on clearly defined maintenance schedules.
By providing clear visibility into support phases and product deprecation timelines, the company enables customers to make more informed long-term technology investment decisions, transition away from ageing products and outdated network protocols before they become security liabilities, and strengthen cyber resilience in line with the upcoming requirements of the EU Cyber Resilience Act.
“Cybersecurity today can no longer rely on promises alone,” said Edward Yu, Chief Information Security Officer of the Zyxel Group. “As cyber threats intensify and global regulations such as the EU CRA raise expectations for product accountability, trust must be earned through verifiable, day-to-day security governance. Transparency across the product lifecycle helps organisations reduce blind spots, make more informed decisions, and strengthen overall cyber resilience.”
Gary Chen, Emerging Markets Head at Zyxel Networks, added, “SMBs and MSPs are under growing pressure to strengthen cyber resilience while managing increasingly complex IT environments. Embedding out-of-the-box security across the entire network infrastructure minimises the costly and time-consuming manual hardening that often follows deployment. This enables our partners to deploy faster, simplify compliance audits, and build a resilient network foundation that earns long-term client trust.”
As cybersecurity threats continue to evolve alongside stricter global regulations, Zyxel Networks remains committed to delivering secure-by-design networking solutions backed by transparent governance, helping businesses build resilient IT environments while simplifying compliance and strengthening trust.
For more information, visit https://www.zyxel.com/global/en.
