CSA Product Security 1.1 looks beyond the device

The Connectivity Standards Alliance released Product Security 1.1 on June 17, 2026, expanding its IoT security certification program from individual devices to larger connected systems. CSA says the new version can cover IoT devices, apps, remote processes, and gateways.

This is not a new Matter feature. Product Security is a separate CSA certification program. Matter says something about interoperability. Product Security is meant to say something about baseline security practices around the product and, in version 1.1, the surrounding system.

That wider scope matters because a smart home device is rarely just the object on the wall. A lock may depend on a phone app, cloud service, account system, gateway, and firmware update path. A bridge may expose devices into Matter while still relying on the brand's own app and cloud. A security label that can cover more of that system is more useful than one that only examines the accessory.

Read the assurance level

CSA says Product Security 1.1 introduces two assurance levels. Level 1 uses a supplier self-assessment reviewed by an authorized test laboratory. Level 2 adds independent assessment and functional testing by an authorized test laboratory.

That distinction is the part buyers should notice. "Secure," "encrypted," and "privacy-focused" all sound similar on product pages. A named assurance level can tell you more about who checked the claim and whether the review went beyond paperwork.

CSA also says version 1.1 covers cybersecurity requirements for the European Union Radio Equipment Directive harmonized standards and Singapore's Cyber Security Labeling Scheme. That is mostly for manufacturers and regulators, but it could make regional security labels easier to compare over time.

What the mark does not answer

A Product Security mark will not tell you whether a device supports Matter, whether it uses Thread, whether a bridge exposes every device cleanly, or whether Apple Home, Google Home, Alexa, SmartThings, or Home Assistant gets the feature you want.

The reverse is also true: a Matter logo does not automatically mean the full product system has gone through Product Security certification. For sensitive categories, look for both kinds of evidence. Locks, cameras, access devices, gateways, bridges, and anything tied to occupancy or remote access deserve more scrutiny than a simple lamp plug.

When a manufacturer cites Product Security, check the exact product or system, the version, and the assurance level. If the claim only appears on a generic company security page, treat it as background until it is tied to the product you are actually buying.