(Credit: TP-Link)
The US is considering banning TP-Link routers in the country because of possible security risks.
Sources tell The Wall Street Journal that the Commerce, Defense, and Justice Departments are investigating routers from Shenzhen-based TP-Link. They are reportedly concerned that TP-Link doesn't address security flaws and ships routers to customers without fixing potential exploits.
"We welcome opportunities to engage with the federal government to demonstrate the effectiveness of our security practices, and to demonstrate our ongoing commitment to the American market, American consumers, and addressing US national security risks," a TP-Link spokesperson tells PCMag.
US-based Chinese Embassy rep Liu Pengyu argues the US is trying to "suppress Chinese companies" with its investigations and is using security concerns as an excuse.
TP-Link routers now make up 65% of the US router market, according to the report, a number that a TP-Link rep rejects, though they admit the firm has grown its US presence. The WSJ says Taiwan already placed a limited ban on TP-Link routers and notes that India issued security warnings about them in the past.
These US investigations aren't a surprise; some US lawmakers already urged the Commerce Department to investigate TP-Link this year. The US House Select Committee on the Strategic Competition Between the US and China sent a letter to Commerce Secretary Gina Raimondo in August that said TP-Link devices are "vulnerable to CCP hacking and data harvesting," referring to the Chinese Communist Party.
"Just last year, security researchers found that [People's Republic of China] cyber military forces used TP-Link routers as part of a hacking campaign that targeted government officials in European countries," US Reps. John Moolenaar (R-MI) and Raja Krishnamoorthi (D-IL) wrote. "We request that Commerce verify the threat posed by PRC-affiliated [small office/home office] routers."
But Itay Cohen, research lead at US-Israeli cybersecurity firm Check Point, told news outlet CSO in September that his research finds that the threat described by the lawmakers may be malware that could also affect routers from US rivals like Cisco or Netgear.
"We fully acknowledge that vulnerabilities exist across the industry," a TP-Link spokesperson says. "However, contrary to claims of widespread vulnerabilities, comparative data places TP-Link on par with, or in some cases ahead of, other major industry players in terms of security outcomes."
TP-Link adds: "Security is never final and always evolving. By working with industry experts, embracing government guidance and standards, and maintaining an unwavering focus on improvement, we ensure that our customers can trust our devices, today and in the future."
TP-Link routers have rated highly in PCMag's tests; the TP-Link Archer AXE75 is our pick for best Wi-Fi router for most people. In our June Reader's Choice survey for home networking brands, TP-Link also won its second award in a row for its standalone routers and mesh routers.
Editors' Choice: This story was updated with comments from TP-Link.