CLS(IoT) for Consumers

How to determine if a product is labelled under the CLS(IoT) and what the cybersecurity levels represent.

Last updated 20 January 2025

Cybersecurity label

To determine if a product is certified under the CLS(IoT), consumers can look out for these labels:

The label will display the product’s cybersecurity level and its registration ID.

The asterisks on the label are indicative of different levels of rating within the CLS. The general requirements for each level are as follows:

Cybersecurity levels and its requirements

Level	Requirements
Level 1	The product has met basic security requirements such as ensuring unique default passwords and providing software updates.
Level 2	The product has met all mandatory security requirements of international standards, and has fulfilled Level 1 requirements.
Level 3	The product has been developed using the principles of Security-by-Design, has undergone assessment of software binaries by approved third-party test labs, and has fulfilled Level 2 requirements.
Level 4	The product has undergone structured penetration tests by approved third-party test labs, and fulfilled Level 3 requirements.