cetome | 1-click PSTI compliance

You are NOT compliant!

It is not possible to comply with the PSTI in 1 click. However, you can start your journey by answering the following questions:

Can your product connect to the Internet or to other products?

A product that can connect to the Internet or to other products is in scope of the PSTI. This connectivity could be in Wi-Fi, Bluetooth, Ethernet or any other technology.

What passwords are in the device?

When passwords are used in the device, they must be unique per device. Note that pairing codes (for Bluetooth or Matter) are not considered passwords.

Is it possible to report a vulnerability discovered in your product?

A Single Point of Contact must be publicly identified to receive reports of product security issues. Moreover, you should publish your commitments to handle these reports.

Until what day will the product receive new security updates?

Customers must know the duration of this support period before buying the product.

Did you write a signed statement of compliance?

This document explains how you comply with the requirements of the PSTI. It is mandatory for market access and it must accompany the product, either physically or as a digital format.

Discover our services to comply with the PSTI

Requirements of the PSTI

Since the 29th of April 2024, all consumer IoT devices sold in the UK must comply with 3 requirements.

1. No default password

Devices must not use default passwords that can be easily discovered. This is to avoid mass-compromise.

2. Vulnerability Disclosure

A single point of contact and associated processes must be in place to receive and manage security reports.

3. Support period

The product must receive security updates until a given date. This date must appear on the product or on a website.

To accelerate PSTI compliance, discover our services.

Penalties

Manufacturers must comply with the PSTI or face heavy penalties.

£20,000 fine per day

when non-compliant products are sold in the UK

Up to £10 million or 4% of the worldwide revenue

for breaching the regulation

A market ban

when not taking action to secure products sold in the UK

Services

The PSTI mandates cyber security requirements for all consumer IoT products. Our 1-click compliance tool is only a start! Go further with our services.

PSTI compliance check

Evaluate your compliance with the PSTI to keep selling your products in the UK.

Comply with the law
Discover potential issues
Prepare next steps

Vulnerability disclosure

Learn about security issues in your products.

Define your commitments
Manage security issues efficiently
Protect your reputation

Post-market support

Protect your customers after product release.

Setup your internal organisation
Improve your existing processes
Provide timely update

1-click PSTI compliance

IoT manufacturers: comply with the PSTI in 1 click!