This router gets the basics right, but the gaps are significant. The hAP ax² is assembled in China. If any device on your Wi-Fi gets infected — a kid’s tablet, a smart bulb, a guest’s phone — it can reach your work laptop and banking app on the same flat network.
A C grade is not a sign-off. It means there are real, exploitable issues affecting this network every day.
-
Your home network is more exposed than it should be
Your home network is more exposed than it should be. Your work laptop, banking sessions, security cameras, and smart home devices all pass through this router — a flaw here gives an attacker leverage over all of them at once.
Show technical detail
Foreign manufacture — FCC ban applies: The hAP ax² is assembled in China. The FCC's March 23, 2026 order applies to manufacturing origin, not brand jurisdiction. No US manufacturing exemption is on file for MikroTik hardware.
-
One wrong VLAN tag or firewall rule on this router silently exposes your devices to the open internet
A wrong VLAN tag or a misapplied firewall rule on this router silently exposes your work laptop or your security camera feed to the open internet — with no warning until something goes wrong. Powerful hardware doesn't protect you if a single port is set up wrong.
Show technical detail
RouterOS complexity — misconfiguration risk: MikroTik's RouterOS is powerful but requires expertise to configure securely. Default settings are not hardened. Misconfigured MikroTik gear has been used as attack infrastructure in several documented campaigns.
-
A small gap that still touches every device on this network
A small gap, not an urgent one — but it still touches everything on this network: your work laptop, your phone, your security cameras, and any guest device that joins the Wi-Fi.
Show technical detail
Limited US consumer support: MikroTik is primarily sold through IT professionals and enthusiasts. Consumer-facing support resources are limited compared to major US brands.
If a new vulnerability is found for your MikroTik hAP ax², we'll email you. One email per incident. No spam.