Synology end-of-life: when your NAS stops getting security updates

The three DSM support phases

• Full Support — firmware, new features and security updates all flow. The healthy state.
• Limited Support — security updates only. No new features, but critical vulnerabilities are still patched. Plan the replacement during this window.
• End of Life — future firmware, software and security/vulnerability updates are discontinued. From here, every new CVE that touches DSM is permanently unpatched on that unit.

In practice many Synology models enjoy a long runway — years of full support, then several more of security-only fixes — but Synology doesn't guarantee a fixed number of years up front, and it varies by model. The only reliable answer is to look your model up.

Software lifecycle vs hardware warranty — don't confuse them

Two separate clocks run on a Synology NAS. The DSM software lifecycle (above) decides when you stop getting security patches. The hardware warranty — typically 2 years on entry-level models, up to 5 years on premium rackmounts — decides whether Synology will repair or replace the unit. Once a model enters the End of Extended Life phase, only basic consultation is offered and physical repairs depend on parts still being available, sometimes at a cost. Track both dates: the security cliff usually arrives while the box is still perfectly functional, which is exactly why it gets missed.

How to find your model's status

1. Product Support Status. Synology's Product Support Status page lists each model's current phase and, where set, its end dates.

2. The Software Life Cycle Policy. Synology's official policy document defines the phases and what each guarantees.

3. Record the security-only and end-of-life dates for every NAS you run, and treat the transition into End of Life as a hard replacement deadline — not a suggestion.