Manufacturer responsibility is the duty of a product maker to secure the components it controls or oversees, including software, services, updates, APIs, and other remote processing layers that are part of the product's operation. In practice, this means the manufacturer must consider not only the shipped device or app, but also the backend systems that keep it working.
This matters in cyber security because a weakness in a manufacturer-controlled service can become a product-level weakness. If an attacker compromises an update server, cloud database, or authentication API, they may affect many customers at once. Defenders respond by mapping dependencies, hardening access controls, signing updates, monitoring logs, and planning incident response for both endpoints and backends. The concept is also important for compliance, because security obligations can extend to remote services that are function-essential.