# The FCC's Covered List Just Got a Lot More Interesting — Robots and Power Inverters Are Next
There are tens of thousands of networked power inverters sitting in American solar installations, data centers, and commercial buildings right now, talking quietly to servers in countries that may not have US interests at heart. The Federal Communications Commission just acknowledged that out loud.
On July 28, the FCC expanded its Covered List to include foreign-produced mobile robots and networked power inverters — effectively barring new models from receiving the equipment authorization needed to enter the US market. It's the kind of move that looks bureaucratic on paper and is actually a significant escalation in the quiet war over critical infrastructure supply chains.
## What the Covered List Actually Does
The FCC's Covered List is not a sanctions list. It doesn't seize equipment or immediately pull products from shelves. What it does is cut off the pathway: to legally import, market, or sell communications equipment in the US, manufacturers need FCC equipment authorization. Land on the Covered List, and new products can't get it.
The carve-outs matter here. Previously authorized models — anything that cleared the FCC before this ruling — can still be sold. Equipment already deployed stays in place. That means this action has essentially zero immediate effect on installed base, which is where the actual risk lives.
This is the same mechanism used to effectively bar Huawei and ZTE from the US market several years ago. It took years and billions in rip-and-replace subsidies to begin unwinding those deployments in rural telecom networks. The FCC clearly decided it doesn't want to repeat that problem with a new category of hardware.
## Why Inverters Are the Real Story
Mobile robots grab headlines. The inverter addition is the one worth watching closely.
Networked power inverters — the devices that convert DC power from solar panels, batteries, or industrial sources into usable AC current — have been getting smarter and more connected for years. Modern inverters from major manufacturers have remote monitoring, firmware update capabilities, and cloud connectivity baked in. That connectivity is a feature for operations teams managing large installations and an obvious vector for anyone else.
The concern isn't hypothetical. Security researchers have demonstrated that compromised inverters in sufficient numbers could introduce instability into grid segments by manipulating power output, creating oscillations, or simply switching off during demand peaks. Germany's BSI flagged similar concerns with Chinese-manufactured solar components in 2023. CISA has included grid-facing devices in repeated advisories about Chinese state-sponsored actors pre-positioning on critical infrastructure.
What makes this particularly uncomfortable is the scale. Solar has expanded dramatically across the US residential and commercial market over the past decade, and a significant share of inverter manufacturing runs through Chinese supply chains — including from vendors that aren't household names in the US but hold substantial global market share. The FCC action doesn't name specific companies, but the "foreign-produced" framing in this context is not ambiguous.
## Robots Are a Newer Front
The mobile robot addition is worth tracking for different reasons. Industrial and logistics robotics have exploded since the mid-2020s, with warehousing automation in particular running hard on equipment from a global supply chain that includes several major Chinese robotics manufacturers.
The security profile of a mobile robot differs from an inverter. These are devices with cameras, sensors, and navigation systems, operating in warehouses, manufacturing floors, and increasingly in environments with physical security relevance. A compromised robot isn't going to destabilize the power grid, but it does represent an intelligence collection risk and — in the wrong deployment — a physical safety variable.
The FCC hasn't historically been the agency you'd expect to regulate robots. This expansion signals either a broader interpretation of its authority over networked communications equipment or a deliberate policy decision to use the Covered List as a catch-all tool for Chinese hardware that agencies can't easily reach through other mechanisms. Possibly both.
## The Authorization Gap
The gap between new authorization and existing deployment is where most of the real-world risk sits, and the FCC's action does essentially nothing about it.
Installed inverters, already-authorized robots, equipment in federal and commercial facilities that cleared review years ago — all of it stays. If a vendor has a firmware update mechanism that runs through servers in a jurisdiction of concern, that connection doesn't go away because new models can't get FCC authorization. The Covered List addresses the front door. The back door is already open.
This is the same problem that plagued the Huawei telecom situation. Barring new equipment is the easy part. Reckoning with what's already deployed is where the policy gets expensive and slow.
---
## HackWire Analysis
The FCC Covered List expansion to robots and power inverters is the right call made about five years late, with a mechanism that addresses future exposure while leaving current exposure largely intact.
What's notable here is the institutional admission embedded in the action. The FCC is explicitly saying that networked power inverters — consumer and commercial hardware that most people treat as appliances — are communications equipment with national security implications. That framing has significant downstream consequences for procurement policy, insurance underwriting, and the conversations happening right now in building operations and facilities management that have nothing to do with cybersecurity departments.
The solar industry in particular should be paying attention. Residential and commercial solar installations are often managed by integrators who chose inverters based on cost and reliability, not threat modeling. Many of those systems have remote management enabled by default, with cloud connectivity to manufacturer infrastructure that procurement teams never scrutinized. The FCC isn't telling those asset owners to do anything — but the policy logic implies they should be.
The robot angle is more nascent but worth watching. As humanoid and mobile robotics deployments scale through logistics, retail, and light manufacturing, the supply chain questions that currently apply to inverters will apply to those devices too. The FCC is drawing a line now that will matter more in three years than it does today.
What's missing from every version of this story, including the official announcement, is a concrete path for existing deployments. Covered List additions for telecom took a decade and a federal subsidy program to meaningfully address. There's no equivalent framework for inverters or robots. Defenders in critical infrastructure and facilities management roles should treat this as a signal to audit their own inventory, not as a solution to the problem it names.
— HackWire Editorial
---
## Related Coverage