Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
It’s been more than two years since the famous security camera problems, including an event where 13,000 customers had their private video streams exposed to complete strangers. We stopped recommending Wyze security cameras at this time for privacy and security reasons. Now things are starting to change.
When we reconsider recommending a security brand after mistakes like Wyze, we look for several signs that the company is trustworthy and provides reliable security for your home and loved ones. This includes:
- New improvements to security processes and protocols, specifically addressing past issues
- Continuous security improvement and audits
- Transparency with CNET and consumers on their security processes and fixing previous vulnerabilities
- A prolonged period without new security incidents, preferably a few years
- Hands-on testing of the brand’s latest devices to ensure quality and performance
Wyze isn’t the first brand we’ve come under this kind of scrutiny. Companies like Eufy and Ring are currently on our best lists because they have addressed past security breaches and associated consequences, made improvements, and created a new security record.
Now you’ll also start to see Wyze products reappear on our safety lists. This includes innovation Wyze Window Camera and the Wyze Camera v4, one of the company’s latest security offerings. After testing devices like these, I’m happy to start turning to Wyze for insightful recommendations, especially since they’re one of the few security companies that offers object detection (like for packages, pets, etc.) for free.
Now let’s take a closer look at how Wyze handled its security.
What has Wyze changed?
Wyze specializes in small, affordable cameras.
In the months since Wyze’s security camera breaches, the company has made several changes, including creating 10 to 12 new engineering positions to simplify and “stress test” its code and reduce reliance on third parties, as well as penetration testing to find more vulnerabilities.
If you want all the details, you will find Current Wyze security and compliance policies herewhere the company offers information about its encryption practices, vulnerability disclosures, bug bounty program and much more. Many of these measures are recent additions from the last two years.
Wyze has also taken more unique steps, including a process called VerifiedViewwhich uses metadata as the type of authentication for all photos or images on a Wyze security camera. Only the account this camera is added to has permission to view its video, a move that specifically addresses past security vulnerabilities.
Following such steps, Wyze has gone two years without any compromising security incidents. This is the kind of experience we like to see before turning to the security company again for our home and privacy needs. This is also enough time for Wyze to release new upgraded devices ready for testing.
CNET’s approach to home security breaches and your privacy
A security company should have a good track record if you want to trust them with your personal information.
Okay, but what happens if Wyze or another home security brand faces a new data breach or similar issue, such as strangers being able to access the cameras? Massive attacks looking for vulnerabilities online are common, and it can be difficult to tell when a company will be affected due to lax security measures – and if that means we need to remove their products from our site.
At CNET, when these issues arise, we ask several questions to decide whether we should stop recommending a brand:
- How does the security issue directly affect users’ privacy or personal information?
- Does the company respond immediately with strong customer communication and efficiently find a solution to the problem?
- Is the security issue an isolated incident or part of a pattern of security breaches that have occurred over time?
- How long has it been since the last incident? Has the company improved its security approach to avoid vulnerabilities in its consumer devices?
When the answers to these questions do not agree, we make decisions such as initially removing Wyze products. If something similar happens to a home technology brandwe’ll let you know exactly what’s happening and if we make any changes to our recommendations. For now, Wyze has given itself another chance.
