
Asus RT-BE Series
Report IMRS-ASU-BE-SERIESMethod: public-record scoring
Apr 2026
Is the Asus RT-BE Series safe?
Solid, with a few gaps.
It has 1 of the 8 protections we check and gets regular security updates, but it has 1 serious security finding.
- Block unknown devices from joining
- Stay outside China’s legal reach
- Remove guests when they leave
Rio does all 8 protections we check. $179.99 with code CHECKED20.
What this means for you
The top 3 risks, most serious first.
-
Serious
It’s made abroad, so the FCC’s 2026 foreign-made router rule applies
Asus BE-series routers are manufactured in Taiwan. The FCC's March 2026 rule applies to all foreign manufacturing origins without a US exemption on file.
-
Moderate
Wi-Fi 7 hardware is new
Security researchers haven't had time to fully audit the BE-series platform. Unknown vulnerabilities are statistically likely in any new hardware generation.
-
Minor
Enable automatic firmware updates immediately in the Asus admin panel
This is the most important configuration step.
Do this: Enable automatic firmware updates immediately
Protections it’s missing
Missing 3 of 8. Has 4 only partly. Has 1 in full.
We check every router for the same 8 protections. Here is how the Asus RT-BE Series does.
-
Blocks unknown devices from joining
MissingNew devices stay out until you approve them once, even if they have the Wi-Fi password.
Zero-Trust Device Admission -
Guest access that expires
MissingGuests are removed when they leave and need your approval to reconnect.
Guest Auto-Expiry -
Made outside China’s legal reach
MissingNot subject to China’s National Intelligence Law.
Clean Supply Chain -
Keeps smart gadgets away from your computers
PartlyDevices are kept apart, so a hacked smart TV can’t reach your laptop.
Network Segmentation (VLANs) -
Encrypts internet traffic for every device
PartlyTraffic leaving your home is encrypted, even from devices that can’t run a VPN app.
Router-Level VPN -
Separate Wi-Fi passwords per group
PartlyEach part of your network gets its own password.
Granular Password Control -
Watches for attacks in real time
PartlySpots suspicious devices, traffic and known attacks as they happen.
Active Threat Monitoring -
Locks a device to approved sites
Has itA device can reach only the sites you approve. Everything else is blocked.
Domain Allowlisting
Fix it today
- Enable automatic firmware updates immediatelyWhy: Enable automatic firmware updates immediately in the Asus admin panel.
- Enable AiProtection on your specific model
- Change default admin password
- Review FCC foreign manufacture rule applicability to your deployment
Already in good shape. Rio goes further.
- You approve every device. Nothing new joins your network until you say yes in the Rio app.
- US company, made in Taiwan. No government flags.
- Guests drop off when they leave. They need your approval to come back.
$20 off for router checkers with code CHECKED20, applied at checkout. Regular price $199.99.
1 year of Rio VPN included, then $7.99/month or $79.99/year · 30-day returns · 1-year warranty
Rio builds this site and is graded by the same method. See the method
Get alerts for your RT-BE Series
Get an email if it shows up on the US government's list of actively exploited flaws, or loses updates. Plus the 5-step lockdown checklist now.
How we scored it70% from who makes it, FCC status and updates. 30% from the 8 protections.
1Scores
2Calculation
89 × 0.7 + 31 × 0.3 = 72/100, grade B. 85+ is an A, 65+ a B, 45+ a C, 30+ a D, below 30 an F.
3The facts behind it
- Who makes it
- Taiwan-headquarteredASUSTeK Computer Inc., Taipei, Taiwan - TWSE: 2357. BE-series Wi-Fi 7 routers manufactured in Taiwan or China depending on model.
- Made in
- Taiwan
- Security updates
- Active
- FCC approval
- FCC authorized - foreign manufacture rule applies
- FCC restrictions
- Foreign manufacture - subject to FCC March 2026 ban
- Last verified
- April 2026
4Known flaws in Asus routers
From the NIST National Vulnerability Database. Your specific model may or may not be affected.
- CVE-2023-39238 · Critical · CVSS 9.8 · Multiple ASUS routers
Format string vulnerability in iperf service. Unauthenticated remote code execution.
5Sources
Every finding traces to public sources: FCC filings, NIST CVE records and US government advisories. Read the full method · Report an error
Other Asus models
See every Asus model: Asus brand overview →