diff --git a/core/Makefile b/core/Makefile
index 3cf3a767d1..de6c937d5e 100644
--- a/core/Makefile
+++ b/core/Makefile
@@ -33,6 +33,7 @@ PYOPT      ?= 1
 BITCOIN_ONLY ?= 0
 BOOTLOADER_QA ?= 0
 BOOTLOADER_DEVEL ?= 0
+UNSAFE_FW ?= 0
 DISABLE_OPTIGA ?= 0
 DISABLE_TROPIC ?= 1
 TREZOR_MODEL ?= T2T1
@@ -125,6 +126,7 @@ SCONS_VARS = \
 	BITCOIN_ONLY="$(BITCOIN_ONLY)" \
 	BOOTLOADER_DEVEL="$(BOOTLOADER_DEVEL)" \
 	BOOTLOADER_QA="$(BOOTLOADER_QA)" \
+	UNSAFE_FW="$(UNSAFE_FW)" \
 	CFLAGS="$(CFLAGS)" \
 	CMAKELISTS="$(CMAKELISTS)" \
 	DISABLE_OPTIGA="$(DISABLE_OPTIGA)" \
diff --git a/core/SConscript.firmware b/core/SConscript.firmware
index d9224a4305..84340b34f5 100644
--- a/core/SConscript.firmware
+++ b/core/SConscript.firmware
@@ -10,6 +10,7 @@ BITCOIN_ONLY = ARGUMENTS.get('BITCOIN_ONLY', '0')
 PRODUCTION = ARGUMENTS.get('PRODUCTION', '0') == '1'
 BOOTLOADER_QA = ARGUMENTS.get('BOOTLOADER_QA', '0') == '1'
 BOOTLOADER_DEVEL = ARGUMENTS.get('BOOTLOADER_DEVEL', '0') == '1'
+UNSAFE_FW = ARGUMENTS.get('UNSAFE_FW', '0') == '1'
 EVERYTHING = BITCOIN_ONLY != '1'
 TREZOR_MODEL = ARGUMENTS.get('TREZOR_MODEL', 'T2T1')
 CMAKELISTS = int(ARGUMENTS.get('CMAKELISTS', 0))
@@ -871,7 +872,10 @@ if BOOTLOADER_QA or BOOTLOADER_DEVEL:
 
 # select vendor header
 if BOOTLOADER_QA or BOOTLOADER_DEVEL:
-    vendor = "dev_DO_NOT_SIGN_signed_dev"
+    if UNSAFE_FW:
+        vendor = "unsafe_signed_dev"
+    else:
+        vendor = "dev_DO_NOT_SIGN_signed_dev"
 elif not PRODUCTION:
     vendor = "unsafe_signed_prod"
 else: