RealVNC Becomes First and Only Remote Access Solution to Complete White Box Audit to Validate Security
VNC Connect by RealVNC, the remote access service used by hundreds of millions of people worldwide, was audited by Cure53, the Berlin, Germany-based IT security consultancy who have also audited other industry leading software such as Mozilla VPN, 1Password and Bitwarden. The comprehensive audit, which took 86 person days and included VNC Server and VNC Viewer on Linux, Windows and Mac, VNC Viewer for iOS and Android, the VNC Connect management portal and backend services, found 38 security-relevant discoveries, none of which were critical and only three were deemed high severity, and these were fixed immediately. The report states, in conclusion, that RealVNC places a strong focus on the security posture of all its components.
“As the technologists responsible for bringing remote access to the mass market, we are today setting new standards and expectations for security in the face of the challenges of the modern IT environment. IT buyers of remote access technologies should expect no less than independent and comprehensive third-party validation of vendor claims. This is especially true for remote access software where the stakes are high, and a mistake could be reputationally damaging or even existential. With Cure53’s report, buyers can be confident that choosing RealVNC as their remote access vendor will never be a regret,” said Adam Greenwood-Byrne, CEO of RealVNC.
A white box security audit is significantly more in-depth than the more common black box penetration test (which RealVNC also commissions by an external organization annually), as the auditors have access to all of the source code, binaries and API/protocol documentation. Of the 38 vulnerabilities found across the range of software and services tested, 32 have been properly addressed — with the fixes confirmed by Cure53 — while the other six were flagged as either false-alerts or works-as-intended and evaluated to be of lower risk.
“At RealVNC, we operate from the standpoint that no company should ever take a vendor’s word for it when they claim their software is secure, which is why we chose to complete a white box audit with a highly regarded security consultancy to prove it,” said Andrew Woodhouse, CIO of RealVNC.
The Cure53 team is highly motivated to find issues when completing white box penetration tests. The fact that no critical threats were found reinforces RealVNC’s focus on ensuring its customers remain safe from threats when using VNC Connect.
“Cure53 is happy to state that test preparation, test execution and also the fix verification, which is one of the most important parts of such an audit, went smoothly and professionally. It is clear that RealVNC has demonstrated a genuine interest in ensuring VNC Connect's security and is prepared and committed to maintaining the high standards we have observed,” said Dr.-Ing. Mario Heiderich, Founder of Cure53.
Headquartered in Cambridge, RealVNC's products for desktop, mobile and embedded platforms make it easy for users to access and operate devices remotely while enabling remote users to work with technicians to resolve problems easily.
“We’re not shying away from any of the issues the report found. We actively fixed issues as they came up and, as security is an ever changing landscape, we’ll continue to ensure the security of VNC Connect in future iterations of the service,” said Ben May, Head of Cyber Security at RealVNC.
To review Cure53's summary of the audit, click here, and to learn more about why RealVNC chose to conduct a Cure53 audit, click here.
ABOUT REALVNC
RealVNC’s secure remote access and management software is used by hundreds of millions of people worldwide. Their software helps organizations cut costs and improve the quality of supporting remote devices and applications, as well as enabling remote working. RealVNC is the original, UK-based, inventor of VNC remote access software and they support an unrivaled mix of desktop, mobile and embedded platforms.
ABOUT CURE53
Cure53 offers classic black-box penetration tests (zero-knowledge) as well as white-box tests and code audits. Web application and mobile app developers speak many languages and so do we. From classic languages such as PHP, JavaScript, ActionScript, Java, Ruby, Python and Perl to more exotic candidates like web back-ends written in C++ and Delphi – we've seen them.
Since Cure53 was founded in 2007, we have performed hundreds of penetration tests against all kinds of web applications, online services, hardware interfaces, mobile applications, libraries and crypto tools. We value manual and thorough tests, human interaction and communication and a short yet-to-the-point penetration test report without overhead or pie charts no one wants to see.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20220609005211/en/
Contact information
Lauren Meckstroth
lauren@theabbiagency.com
702.499.7388
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Core42 “Maximus-384” Cluster Secures Top 20 Ranking on the Global TOP500 Supercomputers List18.11.2025 15:24:00 EET | Press release
Core42, a G42 company specializing in sovereign cloud and AI infrastructure, announced that itsMaximus-384 supercomputer has been ranked No. 20 globally on the TOP500 List, the industry’s most recognized benchmark for publicly known supercomputing systems. The ranking highlights the performance of the AMD Instinct™ MI300X GPU-based “Maximus” cluster, operated at the company’s facility in Buffalo, New York and released ahead of Supercomputing 2025, the leading global conference for HPC. The TOP500 list tracks performance trends across the global supercomputing systems using the High Performance Linpack benchmark (HPL) benchmark. Securing a top-20 position reflects exceptional engineering across compute, memory, storage, and networking, and validates the cluster’s ability to support large scale AI and HPC workloads under sustained production conditions. Through G42’s strategic collaboration with AMD, Core42’s Buffalo deployment features more than 9,000+ AMD Instinct MI300X GPUs configure
Armis Streamlines Network and Security Operations by Utilizing Keysight’s Application Fusion Platform18.11.2025 15:00:00 EET | Press release
Armis, the cyber exposure management & security company, and Keysight Technologies, Inc. (NYSE: KEYS) today announced that Armis’ cyber exposure management technology will now run directly on the Keysight Vision E1S network packet brokers, with additional models expected to support Application Fusion in the future. Through the Application Fusion interface, Armis’ technology can now run directly on the Keysight network packet brokers, combining network visibility with continuous cyber exposure management and security capabilities. By providing immediate, actionable insights across the entire network, without the need for additional hardware, security teams can respond to threats faster, proactively reduce risk and increase operational efficiency. “Businesses must see and secure every asset in their environment to effectively protect against today’s evolving threats,” said Nadir Izrael, CTO and Co-Founder at Armis. “Using both network visibility and security with cyber exposure managemen
Parse Biosciences Announces FFPE-compatible Barcoding Technology for Whole Transcriptome Single Cell Analysis18.11.2025 15:00:00 EET | Press release
Parse Biosciences, the leading provider of scalable and accessible single cell sequencing solutions, today announced a breakthrough technology that unlocks the full potential of formalin-fixed, paraffin-embedded (FFPE) samples. By enabling whole transcriptome capture from archived tissues at single cell resolution, this innovation opens new possibilities for discovery in oncology, translational research, and precision medicine. The use of FFPE samples for single cell RNA sequencing (scRNA-seq) has traditionally been limited to profiling a predefined list of genes due to RNA degradation and fragmentation, reducing transcriptome coverage and discovery potential. Parse’s breakthrough overcomes these challenges with a novel split-pool combinatorial barcoding method that enables true transcriptome-wide scRNA-seq of FFPE-preserved tissues through its unique RNA capture chemistry. This advancement allows researchers to analyze thousands to millions of cells from hundreds of samples simultaneo
KP Labs and Frontgrade Gaisler Join Forces to Advance Fault-Tolerant Computing for Next-Generation Space Missions18.11.2025 15:00:00 EET | Press release
KP Labs, a European Leader in delivering autonomous systems for space applications and Frontgrade™ Gaisler Technologies, a leading provider of high-reliability electronic solutions for space and national security missions have signed a Memorandum of Understanding during the Space Tech Expo Europe in Bremen, Germany. The agreement establishes a framework for collaboration in developing and validating advanced on-board computing architectures designed to increase the autonomy and resilience of future space missions. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20251118359687/en/ As satellite operators and mission designers increasingly rely on on-board data processing and autonomy, maintaining fault tolerance and reliability has become a critical priority. To meet these demands, modern spacecraft integrates radiation-hardened components and advanced FDIR (Fault Detection, Isolation and Recovery) systems that ensure stable oper
ACE Fiber uses Adtran’s Mosaic One Clarity AI solution for proactive assurance, faster resolution and fewer truck rolls18.11.2025 15:00:00 EET | Press release
Adtran today announced that ACE Fiber, the broadband subsidiary of Mississippi’s ACE Power, is using its Mosaic One Clarity solution, built on the REAL AI platform, to move from reactive troubleshooting to proactive assurance across ACE Fiber’s expanding network. Mosaic One Clarity consolidates network and in-home data, identifies likely root causes and provides guided actions that help teams resolve issues faster and avoid unnecessary site visits. By detecting early signs of fiber performance issues and showing which subscribers are affected, Mosaic One Clarity enables more right-first-time resolutions. Early results show up to 75% fewer trouble tickets in the first month, reducing operational strain and improving customer satisfaction. “Our goal was simple – stop reacting and start preventing,” said Sean M. McGrath, GM and CEO of ACE Fiber. “With Adtran’s Mosaic One Clarity, we can anticipate issues and resolve them before they disrupt service. That shift means fewer on-site visits,
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom