Hubbry Logo
QNAP SystemsQNAP SystemsMain
Open search
QNAP Systems
Community hub
QNAP Systems
logo
7 pages, 0 posts
0 subscribers
Be the first to start a discussion here.
Be the first to start a discussion here.
QNAP Systems
QNAP Systems
from Wikipedia

QNAP Systems, Inc. (Chinese: 威聯通科技) is a Taiwanese corporation that specializes in network-attached storage (NAS) appliances used for file sharing, virtualization, storage management and surveillance applications. Headquartered in Xizhi District, New Taipei City, Taiwan, QNAP has offices in 16 countries and employs over 1000 people around the world.

Key Information

QNAP has been a member of the Intel Intelligent Systems Alliance since 2011.[1]

Company history

[edit]

QNAP originally existed as a department within the IEI Integration Corporation,[2] an industrial computing service provider located in Taiwan.[3] In 2004, QNAP Systems Inc. was spun off into a separate company.[4][better source needed]

QNAP Qidu Plant in Qidu District, Keelung, Taiwan

Product overview

[edit]
QNAP Turbo NAS TS-670 Pro

QNAP primarily produces Network-Attached Storage (NAS) appliances. The company also produces Network Video Recorders (NVR) and a series of networking equipment.

  • QTS[5] – an operating system for NAS devices
  • QES (QNAP Enterprise Storage)[6]
  • QuTS hero[7] – an operating system similar to QTS that implements ZFS
  • QuTScloud
  • QNE
  • QSS
  • QuRouter
  • The QNAP QHora-301W supports high-speed Wi-Fi 6 and 10GbE connections, while also providing an enterprise-grade SD-WAN VPN to allow multi-site VPN deployment via the cloud.

Vulnerabilities and attacks

[edit]

In 2021, SAM security group reported that it had discovered critical vulnerabilities in QNAP NAS devices.[8] SAM security group said that these would mean that remote attackers could "execute arbitrary shell commands ... [or] create arbitrary file data on any (non-existing) location ... [or] execute arbitrary commands on the remote NAS".[8] The company said that it had informed QNAP of the vulnerabilities in 2020 but that, four months after being informed, QNAP had not addressed these.[8] The article was later updated to clarify that QNAP had resolved the problems for the most recent devices, but not for older systems, and then that QNAP had revised and released firmware for older devices.[8]

These critical vulnerabilities were reported by Bleeping Computer to be implicated in a massive ransomware attack on QNAP NAS devices in April 2021.[9] This attack, named "Qlocker", compressed all files smaller than 20 MiB into 7z files using 7-Zip with a 32 character long password.[9] In order to retrieve the password, users had to access an .onion webpage and pay 0.01 BTC.[9] This caused losses of at least $260,000 for users.[10]

In January 2022 some QNAP NAS devices were affected by a ransomware infection known as DeadBolt.[11] There were further attacks in March and May 2022.[11]

Achievements

[edit]

2019

  • TS-1677X named Best NAS Device of European Hardware Awards 2019[12]

2018

  • Received the COMPUTEX Best Choice Award 2018[13]

2017

  • TS-451+ named Best NAS Device of European Hardware Awards 2017[14]

2016

  • Received the COMPUTEX Best Choice Award 2016[15]

2014

See also

[edit]

References

[edit]
[edit]
Revisions and contributorsEdit on WikipediaRead on Wikipedia
from Grokipedia
QNAP Systems, Inc., commonly known as QNAP (Quality Network Appliance Provider), is a Taiwanese founded in 2004 that specializes in the design, manufacture, and sale of (NAS) devices, (DAS) solutions, networking equipment, and intelligent video surveillance systems. Headquartered in Xizhi District, , , the company operates global subsidiaries in the United States, , and other regions, with in-house manufacturing facilities supporting full-process production from hardware design to . QNAP's product lineup caters to home users, small businesses, and enterprises, offering scalable NAS platforms that integrate features like AI-driven , data backup, , multimedia management, and cybersecurity protections such as anti-ransomware tools and immutable storage. The company emphasizes innovation in secure and connectivity, evolving its solutions into comprehensive platforms for and collaboration with cloud services, while holding certifications including ISO 9001 for quality management, ISO 14001 for environmental management, for occupational health and safety, and for .

Company Background

Founding and Leadership

QNAP Systems, Inc. was established in as a spin-off from the IEI Integration Corporation, a Taiwanese firm specializing in industrial solutions, transitioning from an internal department focused on hardware integration to an independent entity dedicated to network appliances. This separation allowed QNAP to operate as a wholly owned under the IEI Group while pursuing specialized development in storage technologies. The company was co-founded by Teddy Kuo and Meiji Chang, who brought expertise from their prior roles at IEI. Kuo, serving as Chairman and CEO, played a pivotal role in steering QNAP toward innovation in standalone (NAS) solutions, evolving beyond mere hardware assembly to emphasize user-centric software integration and reliability. Chang, as co-founder and , complemented this leadership by overseeing operational aspects, ensuring the company's early emphasis on quality and efficiency in product design. Their vision positioned QNAP to target small and medium-sized businesses with affordable, scalable NAS offerings that addressed needs without the complexity of enterprise-grade systems. From its inception, QNAP maintained its headquarters in the Xizhi District of , , at 3F., No. 22, Zhongxing Road, fostering a collaborative environment for and R&D. Under Kuo's guidance, the leadership structure prioritized cross-functional teams to accelerate the shift from integrated hardware solutions inherited from IEI to proprietary innovations, laying the groundwork for QNAP's expansion into and applications. This foundational approach emphasized conceptual advancements in storage accessibility, setting the stage for the company's growth while maintaining a commitment to Taiwanese standards.

Growth and Global Expansion

Founded in 2004 by Teddy Kuo and Meiji Chang, QNAP Systems evolved from a Taiwan-based startup into a multinational enterprise, marked by substantial increases in workforce and financial performance. By 2025, the company employed over 1,300 individuals worldwide, supporting its operations in software development, hardware design, and manufacturing. Annual revenue reached approximately $184 million (5.89 billion TWD) in 2023 and $184 million (5.91 billion TWD) in 2024, reflecting steady but minimal growth driven by demand for network-attached storage and related solutions. A pivotal aspect of QNAP's development involved strategic partnerships that enhanced its technological capabilities and market access. Notably, the company joined the Partner Alliance in 2011, enabling collaboration on integrations and fostering innovations in embedded systems. This alliance, previously known as the Intel Alliance, has supported QNAP's alignment with industry standards for intelligent hardware solutions. By the mid-2010s, these efforts contributed to key milestones, including the establishment of international sales channels and dedicated R&D facilities beyond , solidifying its transition to a global player. QNAP's global footprint expanded through a network of subsidiaries and offices, reaching 15 subsidiaries across 28 countries by 2025, with key presences , various European nations, and multiple Asian markets. This facilitates localized , distribution, and regional , including dedicated European headquarters in established to strengthen operations in that continent. Such decentralization has enabled QNAP to serve diverse markets efficiently while maintaining headquarters in , Taiwan.

Products and Technologies

Core Hardware Offerings

QNAP Systems specializes in (NAS) devices as its flagship hardware category, offering a broad spectrum from compact entry-level units like the TS-133, a 1-bay NAS equipped with 2 GB RAM, to high-capacity enterprise solutions designed for data-intensive applications. The company's NAS lineup includes models like the TS-410E, a fanless 4-bay device equipped with an J6412 quad-core processor, dual 2.5GbE ports, and support for 4K output, catering to professional home and small office needs with optimized SSD caching for efficient and media . At the enterprise level, the TS-h1290FX provides a 12-bay all-flash configuration with U.2 NVMe and SSD support, powered by an 7232P or 7302P processor, dual 25GbE and 2.5GbE ports, and ZFS-based storage for high-performance workloads such as and analytics. These NAS devices integrate seamlessly with QNAP's QTS operating system to enable scalable storage pools and configurations. In addition to general-purpose NAS, QNAP produces dedicated network video recorder (NVR) hardware optimized for surveillance applications, featuring built-in video management capabilities for IP camera integration and real-time monitoring. Models such as the QVP-21A, a 2-bay unit supporting up to 8 channels and 12MP resolution, are tailored for small-to-medium businesses (SMBs) and home users, with hardware-accelerated decoding for smooth playback of multiple streams. Larger enterprise-grade NVRs like the TVR-AI200 offer 2 bays, 16-channel PoE+ support for up to 8MP cameras, and up to 40TB of storage (with expansion), emphasizing AI analytics, redundant power options, and hot-swappable drives for continuous operation in security-critical environments. QNAP's networking hardware complements its storage solutions with routers and switches that enhance connectivity in multi-device setups. The QHora-301W router stands out with (AX3600) dual-band support, two 10GbE RJ45 ports, four ports, and functionality for secure remote access and load balancing, making it suitable for SMB networks requiring high-speed and wired performance. The company's switch portfolio includes unmanaged and managed models, such as the QSW-308S (8-port 2.5GbE) for cost-effective upgrades, the QSW-M2108-2S featuring 8 x 2.5G RJ45 ports and 2 x 10G SFP+ ports with combo flexibility for uplinks, and L3 Lite web-managed options like the QSW-M804-4C with 10GbE SFP+ and multi-gigabit RJ45 ports, enabling scalable backbone networks for data centers and offices. QNAP also offers direct-attached storage (DAS) solutions, such as the TR-series enclosures, which connect via USB to devices or PCs for expanded capacity. For example, the TR-004 is a 4-bay unit supporting 0, 1, 5, 6, 10, and JBOD configurations, with hardware controller for reliable data protection and up to 80TB capacity using 20TB drives, ideal for users needing simple, high-speed local storage without network overhead. Similarly, the TR-002 is a 2-bay unit featuring a front-to-rear airflow design where air enters through front and side vents, cools the drives, and exhausts out the rear via a 70mm smart fan. In 2025, QNAP introduced innovative hardware to address emerging high-bandwidth demands, including 5 (TB5) models showcased at for ultra-fast direct-attached storage in creative workflows, supporting up to 80Gbps bidirectional transfers. Complementing this, the QNA-UC25G2SF adapter provides Type-C connectivity to dual 25GbE SFP28 ports in a fanless design, facilitating cross-platform high-speed networking for laptops and workstations without native 25GbE support. In early 2026, QNAP launched the QXG-100G2SF-BCM, a dual-port 100GbE network expansion card featuring a PCIe Gen 4.0 x16 interface, 200 Gbps total throughput, and support for RDMA and SR-IOV, enhancing network efficiency for QNAP NAS systems and virtual machine applications. QNAP's hardware is engineered for diverse markets, from home users seeking affordable media servers to SMBs requiring expandable , and enterprises demanding rackmount through modular expansion units that support petabyte-level growth. This emphasis on allows users to start with basic configurations and scale via additional bays, PCIe expansions, and high-speed interfaces as needs evolve.

Software and Operating Systems

QNAP Systems develops a range of operating systems tailored to its (NAS) and networking hardware, enabling efficient data management, storage, and application deployment. The primary operating system, QTS, is a Linux-based platform designed for general-purpose NAS devices, providing users with tools for , , and applications across home, small office, and enterprise environments. QTS supports a user-friendly interface with features like snapshot replication for protection and integration with third-party apps to extend functionality. For enterprise-grade storage, QNAP offers QES, a specialized operating system built on the kernel and utilizing the file system. QES is optimized for dual-controller systems, delivering , scalable performance, and robust through features such as inline deduplication and compression. Complementing these, QuTS hero is a -based operating system that enhances QTS with advanced data protection capabilities, including self-healing storage pools and bit-rot detection, making it suitable for mission-critical applications requiring long-term reliability. QuTS hero combines the app ecosystem of QTS with ZFS's 128-bit addressing to handle large-scale data volumes without performance degradation. In the realm of cloud and hybrid solutions, QuTScloud serves as a virtualized NAS operating system deployable on public cloud platforms like AWS, Azure, and , allowing users to create scalable, on-demand storage environments that mirror on-premises QNAP functionality. This enables seamless between local NAS and cloud instances, supporting hybrid workflows for businesses. For networking devices, QNE Network OS powers QNAP routers and switches, offering software-defined wide area network () capabilities, virtual network function (VNF) management, and hardware-accelerated traffic optimization for secure, efficient connectivity. QNAP's software ecosystem includes key applications accessible via its operating systems. Qsync Central facilitates real-time across devices, desktops, and mobile platforms, ensuring consistent access to data while supporting and selective syncing to minimize bandwidth usage. Hybrid Backup Sync (HBS) provides a comprehensive, license-free tool for data protection, enabling 3-2-1-1-0 backup strategies that involve multiple copies across local, remote, and cloud destinations with features like deduplication and . Surveillance Station, a professional video , allows centralized monitoring of IP cameras with support for live viewing, recording, and event-based alerts, though it was discontinued in mid-2024 in favor of next-generation smart surveillance solutions like QVR Elite. Core features of QNAP's operating systems emphasize versatility and integration. Virtualization Station enables the creation and management of virtual machines (VMs) on hardware, supporting hypervisors for Windows, , and containerized environments with hardware passthrough for optimal performance. Multimedia streaming is facilitated through built-in servers like /UPnP, allowing seamless playback of video, audio, and photos to connected devices such as TVs, computers, and speakers. The QTS App Center acts as a centralized repository for over 200 official and third-party applications, covering categories from to , enabling users to customize their for specific needs without additional hardware. The evolution of QNAP's software has focused on enhancing hybrid integration through ongoing updates into . Recent releases, such as QTS 5.x and QuTS hero h5.3, introduce improved syncing protocols and AI-assisted , while Hybrid Backup Sync 3.0 consolidates backup, restoration, and synchronization into a unified interface compatible with multi- providers. In , QNAP launched the Hybrid Backup Center, a -based platform for centralized management of multi-site backups, reducing administrative overhead in distributed environments. Additionally, myQNAPcloud Storage emerged as a dedicated service for file drives and backups, integrating directly with HBS to support seamless hybrid deployments. These advancements underscore QNAP's shift toward AI-driven, -native architectures for resilient data ecosystems.

Security Challenges

Historical Vulnerabilities

QNAP Systems' () devices running QTS and related operating systems have faced several significant vulnerabilities prior to 2023, primarily involving remote code execution and exploitation. These flaws often stemmed from unpatched software components exposed to the , enabling attackers to gain unauthorized access and compromise . Early incidents highlighted the risks of hardcoded credentials and command injection weaknesses in and services, prompting widespread advisories from QNAP and cybersecurity authorities. In April 2021, the Qlocker ransomware campaign targeted unpatched QNAP NAS devices by exploiting CVE-2021-28799, a critical involving hardcoded credentials in Hybrid Backup Sync (HBS 3) versions prior to 3.2.3. This flaw allowed remote attackers to execute arbitrary commands, enabling the to compress and encrypt user files using , appending a ".locker" extension and displaying ransom notes demanding 0.3 per device. The attack affected hundreds of devices worldwide, resulting in approximately $350,000 in paid ransoms within the first month alone. QNAP responded by releasing patches and a tool called QRescue to decrypt affected 7z archives, while urging users to update HBS and run scans. The following year, in , the DeadBolt ransomware emerged as a persistent threat, launching multiple waves against QNAP NAS in January, March, May, and subsequent months, primarily targeting unpatched devices running QTS 4.2.x through 4.5.x and QuTS hero h4.2.x through h4.5.x. DeadBolt exploited such as CVE-2022-27593, a path traversal in Photo Station allowing remote attackers to read arbitrary files, which could be chained with other for remote code execution, enabling attackers to encrypt files with a ".deadbolt" extension and hijack the web interface to display demands ranging from 0.3 to 1 BTC. Over 3,600 devices were reportedly infected across these campaigns, leading to significant for users who failed to apply timely patches. QNAP issued multiple advisories, including forced updates in some cases, to mitigate the infections and advised disconnecting devices from the during recovery. Beyond these ransomware-specific exploits, QNAP's QTS and QuTS hero operating systems were affected by several pre-2023 (CVEs) involving command injection and s. For instance, CVE-2022-27596, a critical vulnerability (CVSS 9.8) in QTS 5.0.1 and QuTS hero h5.0.1 prior to specific builds, permitted remote attackers to inject malicious code via crafted HTTP requests without authentication. Similarly, issues in integrated components, such as CVE-2022-42898, could lead to on affected QNAP devices running vulnerable versions. These flaws, detailed in QNAP's security advisories and the , underscored persistent risks in file-sharing and backup functionalities. The cumulative impacts of these historical vulnerabilities included widespread , denial-of-service disruptions, and unauthorized access to sensitive , affecting businesses and individuals reliant on QNAP for storage and backups. Incidents like Qlocker and DeadBolt triggered industry-wide alerts from organizations such as the (CISA) and Singapore's Cyber Security Agency (CSA), emphasizing the need for regular patching and to prevent lateral movement in enterprise environments. These events also highlighted QNAP's ongoing efforts to bolster security through automatic updates and disclosure programs.

Recent Security Incidents and Responses

In 2024 and 2025, QNAP Systems faced several critical security in its operating systems and applications, prompting swift responses through patches and advisories. Notable among these was CVE-2025-29882, a dereference vulnerability in QTS and QuTS hero, which could enable remote attackers with user account access to trigger denial-of-service attacks. Similarly, CVE-2025-44012 affected Qsync Central, involving an allocation of resources without limits or throttling that risked denial-of-service exploitation by authenticated remote users. Another significant issue, CVE-2024-56805, was a in QTS and QuTS hero versions prior to 5.2.x, potentially allowing remote code execution if exploited by users with account access. Additional 2025 advisories highlighted command injection flaws, such as CVE-2025-30264 in QTS and QuTS hero, where authenticated attackers could execute arbitrary commands. Out-of-bounds write vulnerabilities, including CVE-2025-30273, posed risks of memory corruption or modification for users with access. OpenSSH components in QTS and QuTS hero were also patched against multiple flaws in early 2025, addressing potential remote code execution and privilege escalation. A notable incident occurred in November 2024 with the release of QTS 5.2.2 build 20241114, intended to fix security issues but causing widespread connectivity failures, app crashes, and login problems across affected NAS devices. QNAP responded promptly to these threats by issuing targeted updates; for instance, QTS and QuTS hero versions 5.2.x and h5.2.x mitigated CVE-2024-56805 and related buffer overflows. The company withdrew the faulty QTS 5.2.2 update and recommended downgrading to the stable 5.2.1.2930 build while investigating and re-releasing a corrected version. advisories were published on QNAP's official portal, detailing affected products, exploitation conditions, and remediation steps, with patches available via the system's live update mechanism. These incidents underscored broader security enhancements in QNAP's ecosystem, including the introduction of Airgap+ in Hybrid Backup Sync during 2024, which creates logical air-gaps for immutable backups to protect against . Updates also emphasized (MFA) through 2-Step Verification for all user accounts to prevent unauthorized access. In November 2025, following demonstrations at Ireland 2025, QNAP released patches for seven zero-day vulnerabilities (QSA-25-45), including remote code execution (CVE-2025-52424), (CVE-2025-52425), and other flaws in QTS 5.2.x, QuTS hero h5.2.x, Hybrid Backup Sync 3, and NetBak Replicator, exploitable by authenticated users. Earlier, in October 2025, QNAP addressed CVE-2025-55315, a critical vulnerability (CVSS 9.8) in NetBak PC Client versions prior to 2.5.0, enabling bypass and control evasion for remote attackers with low-privileged access. Overall, QNAP's remediation efforts focused on rapid patching and user education to maintain device integrity amid evolving threats.

Innovations and Recognition

Key Technological Advancements

QNAP has advanced its storage and networking technologies through integrations of (AI), enhancing and operational efficiency. At the 2025 Tech Summit in , the company showcased AI-driven storage solutions, including Retrieval-Augmented Generation (RAG) search capabilities on private NAS devices compatible with APIs from , Gemini, and . These features enable intelligent data retrieval and analysis for enterprise applications. Additionally, the Edge AI Storage Server supports virtual machines (VMs), GPU passthrough, and open-source AI models such as LLaMA and DeepSeek, facilitating on-premises AI workloads without reliance on services. In surveillance, QNAP introduced the TVR-AI200 appliance, which incorporates AI video analytics with Power over Ethernet (PoE) support and offline setup in under 10 minutes, integrating seamlessly with the QVR Surveillance platform for unified video management. For smart manufacturing and video editing, the TVS-AIh1688ATX AI NAS, powered by Intel Core Ultra processors delivering up to 36 TOPS AI performance, supports high-speed workflows via dual Thunderbolt 4 ports and optional 100GbE networking through the QSW-M7308R-4X switch. FileTiers technology further optimizes media storage by tiering data across NAS, JBOD expansions, and cloud resources, reducing latency in collaborative editing environments. The QAI-H1290FX Edge AI NAS, equipped with NVIDIA RTX PRO 6000 Blackwell Max-Q Workstation GPU, extends these capabilities for large language model (LLM) inference and AI-powered image/video analytics. High-availability (HA) solutions represent a core focus, with Airgap+ providing physical isolation for backups by connecting secondary devices via QHora routers in bridge mode only during scheduled jobs, ensuring offline protection against . The Hybrid Backup Center, launched in 2025, offers a centralized for immutable and -to-cloud using Hybrid Backup Sync, enhancing resilience in hybrid environments. Dual-node HA clusters, powered by QuTS NAS and the ES1686dc R2 with active-active and petabyte-scale capacity, incorporate multi-chassis (MC-LAG) switches for network redundancy and non-disruptive expansion. From 2024 to 2025, QNAP introduced 5 support through the QXP-T52P PCIe , delivering 40 Gbps unidirectional and 80 Gbps bidirectional bandwidth for compatible models like the TVS-AIh1688ATX, doubling previous generation speeds for high-performance data transfers. Networking advancements include the QNA-UC25G2SF to dual 25GbE SFP28 adapter, enabling rapid multi-terabyte file transfers for field engineers and live events. enhancements in QuTS hero h5.2, released in August 2024, improve data resilience with advanced self-healing, inline deduplication, and SnapSync real-time replication, alongside boosted SMB transmission performance and security features like enhanced . These innovations were prominently featured at 2024 and 2025, where QNAP demonstrated AI integrations, HA architectures, and cloud-hybrid models for enterprise storage and . The QNAP World Tour 2025 further highlighted enterprise AI solutions and intelligent across global events, emphasizing business continuity in hybrid cloud setups.

Awards and Market Impact

QNAP has received numerous accolades for its product design and innovation in the (NAS) sector. In 2023, the TS-410E fanless NAS earned the Red Dot Product Design Award for its all-metal chassis and silent operation, suitable for noise-sensitive environments. More recently, in 2025, the QNA-UC25G2SF USB 4 Type-C to 25GbE network adapter won the same award, recognized for its compact design enabling high-speed connectivity for workflows like 8K and AI applications. Earlier honors include the Best Choice Award in 2016 for the TS-453A NAS, praised for its dual-boot QTS-Linux functionality, and in 2018 for the TS-328 three-bay NAS, highlighting its compact capabilities. Additionally, the TS-451+ NAS was named Best NAS Device at the European Hardware Awards in 2017 for its versatile performance in home and small office use, while the TS-1677X enterprise NAS received the same distinction in 2019 for its processor and AI-ready features. In the small and medium-sized business (SMB) NAS market, QNAP holds a prominent position as a key competitor to and , emphasizing hardware flexibility and virtualization support to drive adoption among professional users. Its focus on innovative features, such as high-speed networking and expandable storage, has contributed to annual revenues of approximately $189 million as of 2023. QNAP's market impact extends to shaping trends in AI storage and enhancing global adoption in surveillance and backup applications. The company has advanced edge AI deployment through solutions like the 2025 Edge AI Storage Server, which integrates , and GPU resources for on-premises AI model training and large management. In surveillance, QNAP's QVR Pro system supports scalable video with cloud backup across 12 global data centers, enabling widespread use in enterprise security setups. For backups, tools like Hybrid Backup Sync facilitate strategies against , promoting reliable protection in business environments. Through partnerships with Seagate for IronWolf Pro HDD integration, for modern NAS modernization, and for rapid recovery, QNAP influences industry standards in secure, high-density storage and compliance formats like CycloneDX and .

References

  1. https://handwiki.org/wiki/Company:QNAP_Systems%2C_Inc.
Add your contribution
Related Hubs
User Avatar
No comments yet.