Business Wire

RealVNC Becomes First and Only Remote Access Solution to Complete White Box Audit to Validate Security


VNC Connect by RealVNC, the remote access service used by hundreds of millions of people worldwide, was audited by Cure53, the Berlin, Germany-based IT security consultancy who have also audited other industry leading software such as Mozilla VPN, 1Password and Bitwarden. The comprehensive audit, which took 86 person days and included VNC Server and VNC Viewer on Linux, Windows and Mac, VNC Viewer for iOS and Android, the VNC Connect management portal and backend services, found 38 security-relevant discoveries, none of which were critical and only three were deemed high severity, and these were fixed immediately. The report states, in conclusion, that RealVNC places a strong focus on the security posture of all its components.

“As the technologists responsible for bringing remote access to the mass market, we are today setting new standards and expectations for security in the face of the challenges of the modern IT environment. IT buyers of remote access technologies should expect no less than independent and comprehensive third-party validation of vendor claims. This is especially true for remote access software where the stakes are high, and a mistake could be reputationally damaging or even existential. With Cure53’s report, buyers can be confident that choosing RealVNC as their remote access vendor will never be a regret,” said Adam Greenwood-Byrne, CEO of RealVNC.

A white box security audit is significantly more in-depth than the more common black box penetration test (which RealVNC also commissions by an external organization annually), as the auditors have access to all of the source code, binaries and API/protocol documentation. Of the 38 vulnerabilities found across the range of software and services tested, 32 have been properly addressed — with the fixes confirmed by Cure53 — while the other six were flagged as either false-alerts or works-as-intended and evaluated to be of lower risk.

“At RealVNC, we operate from the standpoint that no company should ever take a vendor’s word for it when they claim their software is secure, which is why we chose to complete a white box audit with a highly regarded security consultancy to prove it,” said Andrew Woodhouse, CIO of RealVNC.

The Cure53 team is highly motivated to find issues when completing white box penetration tests. The fact that no critical threats were found reinforces RealVNC’s focus on ensuring its customers remain safe from threats when using VNC Connect.

“Cure53 is happy to state that test preparation, test execution and also the fix verification, which is one of the most important parts of such an audit, went smoothly and professionally. It is clear that RealVNC has demonstrated a genuine interest in ensuring VNC Connect's security and is prepared and committed to maintaining the high standards we have observed,” said Dr.-Ing. Mario Heiderich, Founder of Cure53.

Headquartered in Cambridge, RealVNC's products for desktop, mobile and embedded platforms make it easy for users to access and operate devices remotely while enabling remote users to work with technicians to resolve problems easily.

“We’re not shying away from any of the issues the report found. We actively fixed issues as they came up and, as security is an ever changing landscape, we’ll continue to ensure the security of VNC Connect in future iterations of the service,” said Ben May, Head of Cyber Security at RealVNC.

To review Cure53's summary of the audit, click here, and to learn more about why RealVNC chose to conduct a Cure53 audit, click here.


RealVNC’s secure remote access and management software is used by hundreds of millions of people worldwide. Their software helps organizations cut costs and improve the quality of supporting remote devices and applications, as well as enabling remote working. RealVNC is the original, UK-based, inventor of VNC remote access software and they support an unrivaled mix of desktop, mobile and embedded platforms.


Cure53 offers classic black-box penetration tests (zero-knowledge) as well as white-box tests and code audits. Web application and mobile app developers speak many languages and so do we. From classic languages such as PHP, JavaScript, ActionScript, Java, Ruby, Python and Perl to more exotic candidates like web back-ends written in C++ and Delphi – we've seen them.

Since Cure53 was founded in 2007, we have performed hundreds of penetration tests against all kinds of web applications, online services, hardware interfaces, mobile applications, libraries and crypto tools. We value manual and thorough tests, human interaction and communication and a short yet-to-the-point penetration test report without overhead or pie charts no one wants to see.

To view this piece of content from, please give your consent at the top of this page.

Contact information

Lauren Meckstroth

About Business Wire

Business Wire
Business Wire
24 Martin Lane
EC4R 0DR London

+44 20 7626 1982

(c) 2018 Business Wire, Inc., All rights reserved.

Business Wire, a Berkshire Hathaway company, is the global leader in multiplatform press release distribution.

Subscribe to releases from Business Wire

Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.

Latest releases from Business Wire

“Functional Art” by Braun and Virgil Abloh - Co-Created for the Brand’s 100 Years in 2021 - Features in the First Museum Exhibition Devoted to Abloh’s Work30.6.2022 08:00:00 CEST | Press release

Braun, the design-centric German appliances brand, announces its sponsorship of the Brooklyn Museum’s presentation of Virgil Abloh: “Figures of Speech” that opens to the public on July 1st, 2022, and closes January 29, 2023. The exhibition, originally organized by the Museum of Contemporary Art Chicago, spans two decades of the artist’s multifaced career, including collaborations with artists such Takashi Murakami, Juergen Teller, and Arthur Jafa; material from his fashion label Off-White and items from Louis Vuitton, where he served as the first Black menswear artistic director; and unique pieces from brand collaborations including Braun. This press release features multimedia. View the full release here: (Photo: Business Wire) To celebrate 100 years of ‘good design’ in 2021, Braun entered a one-of-a-kind collaboration with Abloh that saw him delve into the Braun archives to update and co-curate the 1965 ‘Wandanlage’ hi fi audi

A Decade of Transparency in European Securitisation: European DataWarehouse Celebrates its 10 Year Anniversary30.6.2022 08:00:00 CEST | Press release

Today marks the 10th anniversary of European DataWarehouse (EDW), Europe’s first securitisation repository, established in 2012 as part of the European Central Bank’s ABS Loan-Level Initiative. In its first decade of operating as a market infrastructure, EDW has strengthened its position as Europe’s first securitisation repository through its registration by both the European Securities and Markets Authority (ESMA) and the Financial Conduct Authority (FCA). Since 2012, EDW has not only facilitated the centralisation, transparency, and standardisation of European loan-level data for the securitisation market, but has also contributed to countless consultations and regulatory initiatives that have shaped the disclosure frameworks in both the EU and UK financial markets. Reflecting on 10 years of progress, Dr. Christian Thun, CEO of EDW said, “EDW’s success has been achieved through the hard work and dedication of our team members and the continuous optimisation of our reporting solutions

H2SITE Raises 12,5M€ to Scale Membrane Reactor Breakthrough Technology30.6.2022 08:00:00 CEST | Press release

H2SITE, a deep-tech pioneer in on-site hydrogen (H2) production, announced today that it has raised 12,5 M€ in a Series A funding round led by Breakthrough Energy Ventures (BEV), with participation from Equinor Ventures, ENGIE New Ventures, TECNALIA and institutional investors from the Basque Country (Capital Riesgo País Vasco (EZTEN FCR) and Seed Capital Bizkaia (SCB)). This press release features multimedia. View the full release here: Membrane bundle for ammonia cracking reactor (Photo: H2SITE) The funding will accelerate the scale up of H2SITE's integrated membrane reactor and membrane separation technologies to obtain fuel cell purity hydrogen from ammonia or methanol cracking, or enable hydrogen transportation in existing natural gas infrastructure. H2SITE will also increase its membrane manufacturing capabilities, operating a world unique membrane manufacturing plant in the North of Spain. “While much focus is given to hy

SES’s C-band Satellite Successfully Launched Onboard SpaceX Rocket30.6.2022 00:53:00 CEST | Press release

SES announced today that the SES-22 satellite was successfully launched into space onboard a SpaceX Falcon 9 rocket from SpaceX’s Space Launch Complex 40 at Cape Canaveral Space Force Station in Florida, United States, at 5:04 pm local time. This press release features multimedia. View the full release here: SES’s C-band Satellite Successfully Launched Onboard SpaceX Rocket (Photo: Business Wire) The first of SES’s C-band satellites dedicated to freeing up the lower 300 MHz of C-band spectrum is built by Thales Alenia Space, and will operate in the 135 degrees West orbital slot. It will deliver TV and radio to millions of American homes and provide other critical data transmission services. SES-22 is expected to start operations by early August 2022. The launch of SES-22 is part of a broader Federal Communications Commission (FCC) program to clear a portion of C-band spectrum to enable wireless operators to deploy 5G services ac

Long-Beleaguered Hotel Property in Paradise Valley, Arizona Gains New Owner30.6.2022 00:10:00 CEST | Press release

Walton Global, a real estate investment and land asset management company with US$3.6 billion under management, is pleased to announce its acquisition of the Smoke Tree Resort property located west of Scottsdale Road on Lincoln Drive in the Town of Paradise Valley, Arizona. The deal closed on June 29, 2022, with ST Holdings, a subsidiary of Scottsdale-based Walton Global Holding, LLC. Walton acquired the 5-acre property for $14 million with plans to build a new boutique hotel that will serve locals and support Arizona tourism. Walton intends to incorporate an elegance in the new design that Paradise Valley is known for and avoid controversial elements that have challenged Smoke Tree and other hotel redevelopments in the past such as roof top bars, condominiums, for-sale units, height, density and other concerns that have hampered revitalization efforts in the past. The distinctive and strategically positioned property was subject to bankruptcy and now has fresh opportunities and a rene