Securifi’s Almond Routers Get Subscription-based IoT Device Security Service

We have been following Securifi's offerings in the home networking space over the last few years. They have stood out in the crowded consumer Wi-Fi market by being one of the pioneers in using the network router to support both IP as well as home automation devices.

The consumer Wi-Fi market is a crowded one, and it is difficult to stand out. While established vendors like Netgear, Linksys etc. can make do with revenue on the hardware alone, companies that don't have the reach or resources to have a comprehensive product line need to be creative in finding ways to drive up revenue. The services / subscription model is widely adopted in the SMB / SME area, but, has typically not found much traction in the consumer market (except for services like TV / Internet / home alarm systems and the like). Securifi is hoping to tap the services market with a new category – subscription-based cybersecurity for the connected home.

Today's smart home has a large number of IoT devices, almost all of which communicate with cloud servers. I would personally avoid anything that requires the cloud to provide its basic functionality, but, given the success enjoyed by IoT devices like the Nest Thermostat and Amazon Echo / Alexa, it is clear that I am in a minority. Digression aside, it is clear that the average consumer has no idea about the servers that are being communicated with by the IoT devices in the household. Often, compromised devices can lead to IoT devices becoming part of botnets (as evident from the recent Mirai DDoS attacks). Securifi's solution to this issue involves a multi-pronged approach:

• Analysis of network devices to look for those having ports open to the Internet and/or weak login credentials, and reporting of the same to the user via the Almond app.
• Analysis of traffic pattern of the network devices (just the destination server addresses, and not deep-packet inspection or inspection of the content itself) to ensure that popular IoT devices are communicating only with their vendors' servers.
• Detection of network devices exhibiting traffic patterns indicative of being a botnet member
• Optional monitoring of the websites browsed by selected devices (with the intent of ensuring safe surfing behavior for kids)

It must be noted that some of the above captured data is stored in Securifi's servers because they need to send push notifications to the user's smartphone even if it is away from the primary network. Securifi is utilizing machine learning to provide part of this functionality (based on the behavior of IoT devices with multiple consumers over time). Users are offered fine grained control over the data stored for this purpose.

Securifi plans to roll out the service to the public starting on January 23, 2017 with a free 30-day trial. Subscription rates start at $4/month, with plans to increase to $10/month after the roll-out of additional features. The service will initially be open only for Almond 3 users. The eventual plan is to roll it out for the Almond and Almond+ users also. Given that this is a cloud-based subscription service, it is not a surprise.

As the number of IoT devices in the household increase, Securifi's subscription-based approach to driving up revenue might serve them well. I can definitely see the average consumer signing up for these types of services. That said, I do want to see more value being provided even with just a $4/month fee. If Securifi can get in some UTM functionality to provide firewall, anti-virus, anti-spam and other services, this type of subscription offering can tempt power users also.