Grade C · Moderate Risk
Is AT&T Router Safe?
AT&T gateways are US-managed ISP routers. The BGW320 rates C. Older models (NVG589, BGW210) are end-of-life D-grade. Full security analysis.
AT&T gateways are US-managed ISP routers. The BGW320 rates C. Older models (NVG589, BGW210) are end-of-life D-grade. Full security analysis.
AT&T gateways are ISP-provided routers managed by AT&T (Dallas, TX), a US company. There is no Chinese ownership risk or FCC ban concern. AT&T's situation is mixed depending on which model you have. The BGW320 (current model, hardware by Humax of South Korea) rates C - it receives active firmware updates and has reasonable security. Older models including the NVG589 and BGW210 are end-of-life and rate D - they no longer receive security patches. If you are on an older AT&T gateway, firmware vulnerabilities will never be fixed.
Bottom line: BGW320: Acceptable. Older NVG/BGW models: replace or add your own router in front of them.
All AT&T models in our database. Click a model for its full security report.
| Model | Grade | FCC Status | Security Support | Made In |
|---|---|---|---|---|
| BGW320 | C | FCC authorized | Managed by AT&T | South Korea (Humax) |
| BGW210 | D | Authorized (aging) | Limited - aging hardware | China (Pace/CommScope) |
| NVG589 | D | Authorized (aging) | End of active support | China (Pace) |
| NVG599 | D | Authorized (aging) | Limited - aging hardware | China (Motorola/Arris) |
When you lease equipment from AT&T, these are the specific router and gateway models you receive. Firmware on ISP-leased equipment is controlled by the ISP, not you.
It depends on which model. The current BGW320 is actively maintained and rates C - acceptable. Older models like the NVG589 and BGW210 are end-of-life and rate D. Check our router checker for your specific model to see its current security grade.
The BGW320 is AT&T's current gateway, rates C in our analysis, and is actively maintained by AT&T. Hardware is by Humax (South Korea). It is safe from a national security perspective and receives regular firmware updates. It lacks advanced security features but is adequate for most home users.
AT&T requires their gateway for fiber authentication (via GPON), but you can set it to IP passthrough mode and connect your own router for all routing and security functions. This gives you better control over firewall settings, VLANs, and firmware.
The NVG589 is end-of-life and receives no security patches. This is a D-grade router - any new vulnerabilities discovered will never be fixed. If you have an NVG589, contact AT&T about upgrading to a BGW320, or use IP passthrough mode and add your own secure router.
CHECK YOUR SPECIFIC MODEL
Check any specific model for CVEs, FCC status, security capabilities, and your personalized action plan.
Check a Router → Top 10 Safe Routers