
Asus RT-AC Series
Report IMRS-ASU-SERIESMethod: public-record scoring
Apr 2026
Is the Asus RT-AC Series safe?
Okay, with real gaps.
It has 0 of the 8 protections we check in full and gets regular security updates, but it has 1 serious security finding.
$20 off for router checkers. $179.99 with code CHECKED20, applied at checkout.
What this means for you
The top 3 risks, most serious first.
-
Serious
It’s made abroad, so the FCC’s 2026 foreign-made router rule applies
All Asus RT-AC routers are manufactured in China. The FCC's March 2026 rule applies to manufacturing origin.
-
Moderate
Its software has a long record of security flaws
Asus RT-AC routers have had critical vulnerabilities. Asus patches quickly relative to the industry, but only if auto-updates are enabled.
Do this: Enable automatic firmware updates (Advanced Settings → Administration → Firmware Upgrade)Source: Various · 2022–2023 · NVD ↗ -
Minor
All Asus routers require manual opt-in for automatic firmware updates
Enable them immediately in the admin panel.
Protections it’s missing
Missing 5 of 8. Has 3 only partly.
We check every router for the same 8 protections. Here is how the Asus RT-AC Series does.
-
Blocks unknown devices from joining
MissingNew devices stay out until you approve them once, even if they have the Wi-Fi password.
Zero-Trust Device Admission -
Encrypts internet traffic for every device
MissingTraffic leaving your home is encrypted, even from devices that can’t run a VPN app.
Router-Level VPN -
Locks a device to approved sites
MissingA device can reach only the sites you approve. Everything else is blocked.
Domain Allowlisting -
Guest access that expires
MissingGuests are removed when they leave and need your approval to reconnect.
Guest Auto-Expiry -
Made outside China’s legal reach
MissingNot subject to China’s National Intelligence Law.
Clean Supply Chain -
Keeps smart gadgets away from your computers
PartlyDevices are kept apart, so a hacked smart TV can’t reach your laptop.
Network Segmentation (VLANs) -
Separate Wi-Fi passwords per group
PartlyEach part of your network gets its own password.
Granular Password Control -
Watches for attacks in real time
PartlySpots suspicious devices, traffic and known attacks as they happen.
Active Threat Monitoring
Fix it today
- Enable automatic firmware updates (Advanced Settings → Administration → Firmware Upgrade)Why: Its software has a long record of security flaws.
- Enable AiProtectionFree Trend Micro threat detection.
- Change default admin password
- Plan migration to Wi-Fi 6 hardware per FCC foreign manufacture rule
Your RT-AC Series, plus what it’s missing.
- You approve every device. Nothing new joins your network until you say yes in the Rio app.
- US company, made in Taiwan. No government flags.
- Rio VPN for the rooms you choose. 3,000+ servers in 110+ countries. First year included.
$20 off for router checkers with code CHECKED20, applied at checkout. Regular price $199.99.
1 year of Rio VPN included, then $7.99/month or $79.99/year · 30-day returns · 1-year warranty
Rio builds this site and is graded by the same method. See the method
Get alerts for your RT-AC Series
Get an email if it shows up on the US government's list of actively exploited flaws, or loses updates. Plus the 5-step lockdown checklist now.
How we scored it70% from who makes it, FCC status and updates. 30% from the 8 protections.
1Scores
2Calculation
57 × 0.7 + 19 × 0.3 = 46/100, grade C. 85+ is an A, 65+ a B, 45+ a C, 30+ a D, below 30 an F.
3The facts behind it
- Who makes it
- Taiwan-headquarteredASUSTeK Computer Inc., Taipei, Taiwan - TWSE: 2357. AC-series routers manufactured in China.
- Made in
- China
- Security updates
- Active
- FCC approval
- FCC authorized - foreign manufacture rule applies
- FCC restrictions
- Foreign manufacture - subject to FCC March 2026 ban
- Last verified
- April 2026
4Known flaws in Asus routers
From the NIST National Vulnerability Database. Your specific model may or may not be affected.
- CVE-2023-39238 · Critical · CVSS 9.8 · Multiple ASUS routers
Format string vulnerability in iperf service. Unauthenticated remote code execution.
5Sources
Every finding traces to public sources: FCC filings, NIST CVE records and US government advisories. Read the full method · Report an error
Other Asus models
See every Asus model: Asus brand overview →