# Ignition Evaluation for Vulnerabilities **URL:** \ **Category:** General Discussion\ **Created:** [October 15, 2021, 7:33am UTC](https://forum.inductiveautomation.com/t/ignition-evaluation-for-vulnerabilities/51976 "2021-10-15T07:33:31Z")\ **Posts on this page:** 1\ **Showing post:** 2
**Author:** ![Matrix\_Engineering](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/matrix_engineering/32/19781_2.png) [@Matrix\_Engineering](https://forum.inductiveautomation.com/u/Matrix_Engineering)\ **Post date:** [October 15, 2021, 8:57am UTC](https://forum.inductiveautomation.com/t/ignition-evaluation-for-vulnerabilities/51976/2 "2021-10-15T08:57:29Z")
> [@Leaving Port 8088 Open](https://forum.inductiveautomation.com/t/leaving-port-8088-open/28742/5): > > If you’re properly using HTTPS/TLS, and have appropriate firewalls in place, then yes, you’re correct - the risk is significantly reduced. At that point, it basically comes down to your preference: is the additional maintenance burden of a VPN worth the reduced risk of some unknown exploit in Ignition compromising things. In pretty much all respects, the VPN is the “safer” option - I can’t make the decision for you, but if you don’t have a compelling reason to, I would be pretty cagey about expo… @paul-griffith mentions they have been externally checked but doesn't give much detail further --- _[View the full topic](https://forum.inductiveautomation.com/t/ignition-evaluation-for-vulnerabilities/51976)._