D
AT RISK
This router has significant issues. Your home network is more exposed than it should be. Anyone on this Wi-Fi (phones, smart TVs, baby monitors, laptops) shares that exposure.
Calix GigaSpire BLAST u6m is a ISP-supplied gateway. The GigaSpire BLAST u6m is manufactured in China.
- Foreign manufacture — FCC ban appliesThe GigaSpire BLAST u6m is manufactured in China. The FCC's March 2026 foreign manufacture ban applies to ISP-premises equipment as well as retail routers.What this means at homeThe FCC has formally labeled this manufacturer a national security threat. Federal contractors and anyone working remotely for sensitive employers faces specific exposure.
- ISP controls all configurationCalix GigaSpire mesh devices are fully managed by your ISP. Users cannot audit firmware, configure firewall rules, or control advanced security settings on the device.
- Calix is US-headquartered — no Chinese government legal exposureCalix Inc. is a US public company. Manufacturing origin is the regulatory concern under the FCC rule, not Calix's corporate structure.
Everything on this network shares the exposure
💻 Work laptop & remote access
🏦 Online banking & passwords
📷 Security cameras & smart locks
👧 Kids' devices & school logins
📱 Every phone & tablet at home
🔊 Smart speakers & streaming
FCC & Ban Risk
54
/100
C
Supply chain · FCC status · CVEs · Patch support
Security Capabilities
0
/100
F
Zero-Trust · VPN · Segmentation · Monitoring
FCC & Ban Risk measures supply-chain exposure, government flags, and CVE history. Security Capabilities measures what the router can actually do to protect your network. How we score →
Here's what closes the gaps.
Your ISP gave you an okay router. You can still have a great network.
Rio Router goes behind your ISP gateway and handles the Wi-Fi side, where the security gaps live. Your ISP keeps your internet connection. Rio gives you a modern, secure Wi-Fi network with all 8 dimensions covered.
Steps to strengthen your home network
1
Contact your ISP to ask about hardware replacement options under the FCC rule
2
Ask specifically if a US-manufactured or Taiwan-manufactured alternative is available
3
Install a secondary router in bridge/passthrough mode for advanced network control
4
Secure your ISP account credentials with a strong password and 2FA
🔒
Security capabilities comparison
Here's how your router compares to Rio across the 8 dimensions we built our framework around. (Yes, we made Rio.)
CALIX
your router
Rio Router™
full standard
Zero-Trust Device Admission
Every new device is blocked by default - admin must approve it once, even if it has the right password
Locked
Available
Network Segmentation (VLANs)
Devices on your network are isolated from each other, so a hacked smart TV can't reach your laptop
Locked
Available
Router-Level VPN for All Devices
All traffic - including smart devices that can't run VPN apps - is encrypted before leaving your home
Locked
Available
Domain Allowlisting
Block everything except approved sites; more effective than trying to blacklist billions of harmful URLs
Locked
Available
Granular Password Control
Separate passwords per network zone - changing one doesn't affect others
Locked
Available
Guest Auto-Expiry
Guest devices are automatically removed when they leave; neighbors can't reconnect without re-approval
Locked
Available
Clean Supply Chain
Manufactured outside Chinese legal jurisdiction - not subject to China's National Intelligence Law
Locked
Available
We built Rio to hit all 8 dimensions, so we use it as the benchmark. If another router hits 8/8, we’ll add it.
See Rio →
See all Calix models: Calix brand overview →
Device context
Manufacturer
US-headquartered — Calix, Inc., San Jose, CA — NYSE: CALX. GigaSpire BLAST u6m is a Wi-Fi 6 mesh ISP gateway manufactured in China for fiber ISP deployment.
Country of origin
Built in China
US gov status
FCC authorized — foreign manufacture rule applies — Foreign manufacture — subject to FCC March 2026 ban
Security patches
Managed by ISP
How this was scored · verified March 2026: This rating combines FCC authorization status, manufacturer legal jurisdiction, CVEs from NIST NVD, active patch support status, and CISA advisory mentions. See full methodology →
Not ready to switch yet?
We'll email you if a new vulnerability hits your Calix GigaSpire BLAST u6m. Free, one email per incident, no spam.
Reference Data
Sources & evidence
All findings trace to publicly verifiable primary sources - US government databases, official FCC filings, and NIST CVE records. No proprietary or anonymous sources are used.
Full data source documentation: Scoring Methodology & Citations →