Sample Audit Reports
Explore full architectural assessments to understand how Device Prophet analyzes risk, compliance, and regulatory gaps.
EcoTherm
Consumer smart thermostat with AI-powered scheduling and occupancy detection. Wi-Fi/Zigbee connected, 10-year lifespan, typical security gaps.
Context & Design Considerations
Designed as a low-cost, mass-market consumer device. The survey reflects trade-offs common in this sector: heavy reliance on cloud connectivity for features vs. privacy concerns. Key security decisions include enabling Secure Boot despite cost pressure, but lacking robust key revocation mechanisms due to the 'manual' update strategy.
Key Inputs
- Secure Boot: yes
- Connectivity: wifi, thread_zigbee
- OS: freertos
Deployment Target
- Market: eu, uk, usa
- Industry: consumer
- Org Size: SME
GridForge Industrial Edge Gateway
Industrial edge gateway for factory digital twins and predictive analytics. Full secure boot, continuous scanning, IEC 62443 target.
Context & Design Considerations
An industrial edge gateway where reliability and security are paramount. The audit reflects a 'defense-in-depth' approach: hardware-backed crypto, secure boot, and network segmentation. The main gaps identified related to supply chain transparency (SBOM) which is typical for integrators using many third-party modules.
Key Inputs
- Secure Boot: yes
- Connectivity: wifi, ble, ethernet, cellular
- OS: linux_yocto
Deployment Target
- Market: eu, usa
- Industry: industrial
- Org Size: SME
SecurePay Countertop POS Terminal
Countertop POS terminal for small retailers with NFC, chip reader, QR camera, and on-device AI fraud detection. Android-based with hardware security module for PCI compliance.
Context & Design Considerations
A high-security financial terminal. The survey inputs demonstrate stricter compliance needs (PCI-DSS). Critical risks revolve around the Android OS supply chain and the 'flat network' deployment assumption, which flags a major architectural vulnerability despite the device's robust hardware security.
Key Inputs
- Secure Boot: yes
- Connectivity: wifi, ble, ethernet
- OS: android
Deployment Target
- Market: eu, usa
- Industry: finance
- Org Size: SME
Frequently Asked Questions
What questions are in the Preliminary Design Audit?
The audit focuses on architectural metadata rather than your code. We ask about:
- Hardware: SoC vendor, connectivity (WiFi, BLE, Cellular), and secure storage capabilities.
- Software: OS type (Linux, RTOS), update mechanisms, and encryption strategies.
- Governance: Development processes, SBOM maturity, and supply chain security.
How long will it take?
The time depends on how readily you can confirm the device's architecture and development processes. Keep the relevant specifications available and save a draft if you need to check an answer.
Who is this audit for?
It is designed for Systems Architects, CTOs, and Product Owners responsible for the compliance and security roadmap of connected devices. It highlights potential issues for engineering review.
Where is my data stored?
Draft answers are saved in this browser. When you submit an assessment, its answers are sent to Device Prophet and stored to generate and share the report. Anyone with its link can view a submitted report. Smart Import also sends and stores the text you submit. See the privacy notice for processing details.
Can I share my report?
Use the Share button on your dashboard.
- Drafts: The link contains your answers in compressed form. Anyone with it can import them into another browser.
- Completed reports: The link opens a public read-only report. Anyone with it can view the report.
Share either kind of link only with people who should have access to the information.
How do I back up my work?
Use the backup button below to save this browser's workspace as a JSON file. Clearing this site's browser storage removes local drafts and report entries. It does not delete submitted reports or uploaded files stored by Device Prophet.
Where can I see example audit reports?
The Sample Reports Gallery contains reports generated from illustrative device configurations, with PDF downloads and input data exports.