# Ignition Evaluation for Vulnerabilities **URL:** \ **Category:** General Discussion\ **Created:** [October 15, 2021, 7:33am UTC](https://forum.inductiveautomation.com/t/ignition-evaluation-for-vulnerabilities/51976 "2021-10-15T07:33:31Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![jose.granero](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jose.granero/32/11190_2.png) [@jose.granero](https://forum.inductiveautomation.com/u/jose.granero)\ **Post date:** [October 15, 2021, 7:33am UTC](https://forum.inductiveautomation.com/t/ignition-evaluation-for-vulnerabilities/51976/1 "2021-10-15T07:33:31Z")
- Has Ignition been independently evaluated for vulnerabilities and remediated/patched? - Does Ignition have a released statement saying something to the effect that Ignition software is in a continuous state of vulnerability assessment and patching? ---
**Author:** ![Matrix\_Engineering](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/matrix_engineering/32/19781_2.png) [@Matrix\_Engineering](https://forum.inductiveautomation.com/u/Matrix_Engineering)\ **Post date:** [October 15, 2021, 8:57am UTC](https://forum.inductiveautomation.com/t/ignition-evaluation-for-vulnerabilities/51976/2 "2021-10-15T08:57:29Z")
> [@Leaving Port 8088 Open](https://forum.inductiveautomation.com/t/leaving-port-8088-open/28742/5): > > If you’re properly using HTTPS/TLS, and have appropriate firewalls in place, then yes, you’re correct - the risk is significantly reduced. At that point, it basically comes down to your preference: is the additional maintenance burden of a VPN worth the reduced risk of some unknown exploit in Ignition compromising things. In pretty much all respects, the VPN is the “safer” option - I can’t make the decision for you, but if you don’t have a compelling reason to, I would be pretty cagey about expo… @paul-griffith mentions they have been externally checked but doesn't give much detail further ---
**Author:** ![JordanCClark](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jordancclark/32/83362_2.png) [@JordanCClark](https://forum.inductiveautomation.com/u/JordanCClark)\ **Post date:** [October 15, 2021, 11:21am UTC](https://forum.inductiveautomation.com/t/ignition-evaluation-for-vulnerabilities/51976/3 "2021-10-15T11:21:49Z")
> **[IA Targeted in Ethical Hacking Competition: What You Need to Know](https://www.inductiveautomation.com/blog/ia-targeted-in-ethical-hacking-competition-what-you-need-to-know)** > > Last week the latest edition of the Pwn2Own hacking competition was held during the S4 security conference in Miami. The Zero Day Initiative, which hosts the competitions, aims to increase security awareness by promoting the ethical disclosure of... ---
**Author:** ![jose.granero](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jose.granero/32/11190_2.png) [@jose.granero](https://forum.inductiveautomation.com/u/jose.granero)\ **Post date:** [October 15, 2021, 11:37am UTC](https://forum.inductiveautomation.com/t/ignition-evaluation-for-vulnerabilities/51976/4 "2021-10-15T11:37:12Z")
Thank you, Jordan ---
**Author:** ![bkarabinchak.psi](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bkarabinchak.psi/32/83567_2.png) [@bkarabinchak.psi](https://forum.inductiveautomation.com/u/bkarabinchak.psi)\ **Post date:** [October 15, 2021, 12:20pm UTC](https://forum.inductiveautomation.com/t/ignition-evaluation-for-vulnerabilities/51976/5 "2021-10-15T12:20:57Z")
One thing that will be on you for your projects is to make sure to use named queries so that you your vision clients do not need Legacy SQL Access - requiring this leaves you open to SQL injection.