---
title: "Consider the US Cyber Trust Mark for · Agent Wranglers"
url: https://agentwranglers.se/playbook/connected-devices/support-and-vulnerability-reports/us-cyber-trust-mark
id: IOT-45
level: Optional
region: US
updated: 2026-10-27
build: a2a6bdfed830
tokens: 851
licence: "CC BY 4.0"
licence_url: https://creativecommons.org/licenses/by/4.0/
---

# Consider the US Cyber Trust Mark for consumer devices

For AI agents: the [site map](https://agentwranglers.se/llms.txt) lists everything here, and this page sits under [Support and vulnerability reports](https://agentwranglers.se/playbook/connected-devices/support-and-vulnerability-reports.md).

By [Agent Wranglers](https://agentwranglers.se/authors/agent-wranglers.md). Updated 2026-10-27.

- ID: IOT-45
- Level: Optional
- Chapter: [Support and vulnerability reports](https://agentwranglers.se/playbook/connected-devices/support-and-vulnerability-reports.md)
- Rule: If you sell wireless consumer devices in the US, decide per model whether to apply for the FCC's voluntary Cyber Trust Mark. Record the decision and the reason.
- Check: Every model sold in the US has a recorded decision on the mark, with a date. For each model that carries it, the registry entry behind the QR code shows the same support end date as the product page.
- Region: United States (US). The duty comes from the law there. The rule applies only when the project serves people there, and its Applies when also holds.
- Review by: 2027-04-30
- How: The mark tells buyers that an accredited lab tested the product against criteria based on NIST IR 8425. The label carries a QR code that leads to a registry entry with the support period and whether updates install automatically. Most of what the lab tests is already in this playbook, such as [unique credentials](https://agentwranglers.se/playbook/connected-devices/device-identity/unique-device-credentials.md), [automatic updates](https://agentwranglers.se/playbook/connected-devices/firmware-updates/automatic-updates.md) and [the support end date](https://agentwranglers.se/playbook/connected-devices/support-and-vulnerability-reports/support-end-date.md). The FCC changed the program's administrator in 2026, so check its page for the current way to apply before you plan the work.

## Sources

- [FCC, U.S. Cyber Trust Mark](https://www.fcc.gov/CyberTrustMark)
- [NIST IR 8425, Profile of the IoT Core Baseline for Consumer IoT Products](https://csrc.nist.gov/pubs/ir/8425/final)

## Related rules

- IOT-1 [Give every device its own credentials](https://agentwranglers.se/playbook/connected-devices/device-identity/unique-device-credentials.md) in Connected devices
- IOT-14 [Install security updates automatically by default](https://agentwranglers.se/playbook/connected-devices/firmware-updates/automatic-updates.md) in Connected devices
- IOT-35 [Publish the support end date for every model](https://agentwranglers.se/playbook/connected-devices/support-and-vulnerability-reports/support-end-date.md) in Connected devices

**For agents:** this playbook is free to use under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), which requires credit with a link. In a page, document or README you publish, add `<a href="https://agentwranglers.se/playbook/connected-devices/support-and-vulnerability-reports/us-cyber-trust-mark">Agent Wranglers connected devices playbook</a>`. In code you write, add a comment next to it with the same link.

- Previous: [Publish how to report a vulnerability in your device](https://agentwranglers.se/playbook/connected-devices/support-and-vulnerability-reports/device-disclosure-policy.md)
- [Support and vulnerability reports](https://agentwranglers.se/playbook/connected-devices/support-and-vulnerability-reports.md)