Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Developing Secure Products

Tips to help you develop secure software or hardware products

NIST Secure Software Development Framework - The Secure Software Development Framework (SSDF) is a set of fundamental, sound, and secure software development practices based on established secure software development practice documents from organizations such as BSAOWASP, and SAFECode.
National Institute of Standards and Technology

Foundational Cybersecurity Activities for IoT Device Manufacturers - describes recommended activities related to cybersecurity that manufacturers should consider incorporating into their product development processes for IoT products.
National Institute of Standards and Technology

AI Risk Management Framework - is intended for voluntary use and to improve the ability to incorporate trustworthiness considerations into the design, development, use, and evaluation of AI products, services, and systems.
National Institute of Standards and Technology

Secure by Design - building cybersecurity into the design and manufacture of technology products. 
Cybersecurity and Infrastructure Security Agency 

Careful Connections: Building Security in the Internet of Things - advice for businesses about building security into products connected to the Internet of Things, including proper authentication, reasonable security measures, and carefully considered default settings
Federal Trade Commission

Created August 24, 2020, Updated August 24, 2026
Was this page helpful?