Axis Communications commits to CISA’s secure by design guidance

Axis Communications has become the first major surveillance camera manufacturer to sign the Cybersecurity and Infrastructure Security Agency's Secure by Design pledge, according to Cybersecurity Dive.

The pledge requires participating companies to improve product protections within a year. Axis said it already follows many of the outlined practices, including using multifactor authentication, avoiding default passwords, and maintaining a vulnerability disclosure process. The company's decision comes after Claroty disclosed four vulnerabilities in the companys cameras four months earlier, which could have allowed attackers to access surveillance systems. It noted that Axis's "quick response" and "timely" patching at the time.

"By making this pledge, we affirm our continuous commitment to helping customers follow cybersecurity best practices and drive greater accountability in the physical security industry," said Chief Technology Officer Johan Paulsson. He added that cybersecurity is already "a core part of what we offer."

CISA's Secure by Design initiative launched in 2023 to encourage vendors to address common security flaws.