Device labelling programmes for consumers and manufacturers could increase the transparency of cybersecurity and encourage smart devices to be secure by design.