---
title: "Penetration tests"
canonical: "https://docs.cuesystem.com/space/TSI/168427601/Penetration%20tests"
format: markdown
---
All parts of the CUE ecosystem undergo penetration testing on a regular basis. These tests simulate real-world installations and are realized against a demonstration box connected to the local network. Tested devices obtain addresses from the local DHCP server. Tests aimed at verifying the security of network interfaces of devices against unauthorized access or other forms of attack.

These tests include, for example:

- Attack surface mapping
- Device testing
- Server endpoints testing.

For testing, there are used automatic vulnerability scanners, single-purpose tools, testing scripts, and standard administration tools. No negative impacts on tested devices were detected during the test.

If issues are detected during testing, they are immediately removed and a new version of the relevant software and firmware is released. New versions are released regularly and each new version increases the security of all parts of the CUE ecosystem.

Detail vulnerability information is given in internal and confidential documents including recommended ways of issues dealing and references to websites with other information. **These internal documents are not shared by CUE a.s. and are intended only for internal use and to improve the safety of CUE ecosystem.**