Penetration Test
13.03.2026 | As specialists in digital signage solutions for internal communication, our customers’ data security is our top priority. This includes both customer data and all content published by our customers.
For this reason, we conduct a comprehensive white-box penetration test annually, during which external security experts examine our software with full insight into its architecture, code, and system configuration.
The advantage of a white-box test: Security vulnerabilities are identified much more thoroughly and efficiently, as testers work with the same knowledge as internal developers—but with the sole focus on uncovering weaknesses.
Our security is solid — we continue to harden it nonetheless
The good news: the penetration test did not reveal any critical or severe vulnerabilities. Our solution is therefore operating at a very solid security level and does not present any business relevant risks. Still, we are not satisfied with this alone. In the coming weeks and months, we will systematically address the identified medium and low risk findings — normal technical debts that occur in virtually any system. Even though they do not pose an immediate threat, we aim to resolve them with additional hardening measures to ensure long term protection for our customers.
In addition to the annual penetration tests, we revised our internal security concept last year. The resulting measures are currently in their final implementation stage. We will provide further updates here at a later time. If you have any questions, we are always happy to help.
Swiss‑made software = hosting in Switzerland
Regarding data storage and hosting, everything remains unchanged: all user data and content published through the system are stored exclusively in certified data centers within Switzerland. Data transmission is protected end to end via TLS (Transport Layer Security). Stored data is secured using database encryption (encryption at rest). You can find more details in the following blog article.
By the way: Screenimage Pro can continue to be operated either as a cloud solution or as an on premise installation — depending on your security and network requirements.
Next blog post