Rio is a $249 cybersecurity router that addresses the network-layer controls in NIST 800-171. No IT staff required. No Chinese components. Deploys in under an hour.
Designed in USA. Manufactured in Taiwan. No Chinese backdoor risk.
“Having the Rio Cybersecurity Router has reduced the workload of complying with the many differing cybersecurity requirements I must meet as a government subcontractor. I thank you for the commitment to cybersecurity, and keeping the pricing within a small business’s budget.”
Defense Subcontractor Government Prime Supplier
NIST 800-171 has 110 controls across 14 families. The guidance assumes you have an IT team, a SIEM, and a six-figure compliance budget. Most small DIB contractors have none of those things.
A significant portion of certification cost is network infrastructure.
Rio handles that layer for $249.
Under 32 CFR 170.23, primes must flow down CMMC requirements to every subcontractor tier that handles FCI or CUI. Primes are legally responsible for verifying sub compliance before sharing covered data.
CMMC Level 2 has 110 controls. A router can only address the network-layer ones. Here are the controls Rio addresses, what they typically cost to satisfy without Rio, and how Rio handles each. The full mapping is downloadable below.
| NIST 800-171 Control | What it requires | Typical cost / effort | How Rio handles it |
|---|---|---|---|
| 3.13.1 Boundary protection |
Monitor and control communications at the network boundary. | $5K-$15K firewall + integrator | ✓ Stateful firewall configured out of the box. |
| 3.13.5 Subnet segmentation |
Separate publicly accessible systems from internal CUI networks. | Managed switch + VLAN engineer | ✓ SecureRoom creates up to 16 isolated VLANs. |
| 3.13.6 Deny by default |
Network traffic denied by default, allowed only by exception. | Manual firewall ruleset by consultant | ✓ Zero-Trust allowlisting enabled by default. |
| 3.13.7 No split tunneling |
Remote devices can't bypass the protected network path. | Enterprise VPN + endpoint config | ✓ Always-on VPN routes 100% of traffic. |
| 3.1.14 Managed access point |
Remote access routed through a single managed gateway. | SD-WAN appliance + managed service | ✓ Rio is the single managed access control point. |
| 3.1.16 Wireless authorization |
Authorize wireless access before allowing connection. | Enterprise Wi-Fi controller + RADIUS | ✓ Admin approves every device in the app. |
| 3.1.17 Wireless encryption + auth |
Protect wireless via authentication and encryption. | Enterprise AP refresh ($2K+/AP) | ✓ WPA3 + allowlisting + always-on VPN. |
| 3.1.18 Mobile device control |
Control connection of mobile devices. | MDM seat licenses ($5-$10/user/mo) | ✓ Phones and laptops blocked until approved. |
| 3.1.20 External connections |
Verify and control connections to external systems. | Outbound proxy + monitoring service | ✓ Deny-by-default + monitored VPN egress. |
Rio addresses 9 of the 110 NIST 800-171 controls — the network-layer ones. You still need policy, training, endpoint, identity, and physical controls for the rest. We tell you exactly which controls remain so you don't get blindsided in an audit. Download the full mapping below.
Rio is a cybersecurity router built for small businesses that cannot afford an enterprise security stack. It ships with the controls turned on.
Every device tunneled by default. Supports encryption-in-transit requirements without per-device config.
Each device treated as untrusted until verified. Supports access control and system integrity requirements.
Separate CUI-handling machines from the office printer and guest wifi. No managed switches required.
A CMMC assessor asks for evidence that controls are implemented. Rio outputs configuration reports and network segmentation documentation you hand directly to your assessor. The public control mapping shows which artifacts Rio produces for each control.
A product that addresses a control but can't produce evidence of it will still cost you time during the audit. Rio is designed so your assessor can verify the network layer from documentation alone.
Enterprise mesh systems are capable products. If you have a network engineer on staff and budget for licensed controllers, they're reasonable choices. Most small DIB contractors don't.
| Consumer Router | Enterprise Mesh | Rio | |
|---|---|---|---|
| CMMC controls pre-configured | No | Requires setup | Yes |
| Network engineer required | Not capable | Required | Not required |
| Recurring license cost | None | Yes | None |
| Verifiable supply chain | Often Chinese-owned | Varies | US company, Taiwan manufacturing |
| Cost | $50 - $300 | $1,000s + licensing | $249 |
If you already have enterprise gear and a team to configure it, you may not need Rio. If you don't, Rio is the shorter path.
John Hui, Founder & CEO
Former CSO, Foxconn. Former CEO, eMachines and Packard-Bell. Rio was built because the small-business router market was delivering enterprise risks on consumer hardware.
Learn more about Rio →FROM THE FIELD
Short reports from early Rio deployments. Identities withheld until named case studies are approved for release.
Aerospace Tier 2 subcontractor
Prime's compliance team flagged their flat network as a Level 2 blocker. They deployed Rio the same week. CUI machines moved into a dedicated SecureRoom. Network documentation handed to the C3PAO at pre-assessment.
Precision finishing operation
They needed SC-8 handled before their C3PAO visit. Rio's always-on VPN became the baseline control in their System Security Plan. No per-device agents, no MSP engagement required.
Former federal cybersecurity professional
Career federal cybersecurity professional turned compliance consultant. Won't recommend infrastructure she hasn't verified. Runs Rio in her own practice and installs it as the network baseline for every small-DIB client.
Named case studies in development. Contact us to speak directly with a current customer about their deployment.
You run a shop. A DoD prime is one of your customers. You've been getting CMMC emails for two years. Rio handles the network layer. One purchase, one setup, one documented line item in your compliance file.
Rio deploys per-site without a controller, segments networks without layered VLANs, and gives you a consistent baseline across locations you can't always visit. Control mapping shows your assessor exactly what Rio covers.
Your manufacturing clients are asking about CMMC. Rio is a product you can deploy, bill for, and support. Not a service line you have to staff. MSP partner pricing available.
Rio is a product your clients can purchase as part of their network infrastructure. The public control mapping makes assessment scoping easier. Designed to remove the "what router should we buy" question from your engagements.
Products don't get CMMC certified. Organizations do. Rio addresses specific NIST 800-171 controls your organization will be assessed against. The control mapping shows which ones.
No. Rio is network infrastructure. You still need policy, documentation, training, and an assessor. Rio makes the network section of your NIST 800-171 work straightforward.
Yes. Rio sits behind your ISP's modem in the same spot your current router occupies. Your existing devices continue to work.
One per site for most small-business deployments. Contact us if your location is unusually large or has specific network requirements.
If your C3PAO assessor determines that Rio, properly configured, does not address the controls we've mapped in the NIST 800-171 control mapping document, contact us within 90 days of your assessment with the assessor's written finding. We'll work with you and your assessor to resolve the gap, and if we can't, we'll refund your purchase.
If your current router is from a Chinese-owned company, it's a supply chain risk regardless of its features. If it's from a US or allied-country company but doesn't support segmentation, always-on VPN, or device-level isolation, you will likely need to upgrade to meet Level 2 requirements.
Ask us directly. Requirements vary by contract and the type of CUI you handle. We will tell you honestly whether Rio fits.
Rio is $249. Ships in days. Deploys in under an hour. One line item off a workload of dozens.
