Exapolicy's internal security audit reveals overlooked device and network vulnerabilities.

In October 2026, software company Exapolicy conducted a security review of its own development and office environment. The audit focused on personal computers, a broadband router, and other networked devices commonly used by individuals and small businesses. The review found several security settings that were weaker than assumed, including open file shares, unprotected development servers, and disabled tamper protection. These oversights, often resulting from factory defaults or permissions granted for convenience, could expose the systems to risks like ransomware or unauthorized access. The company subsequently documented the issues and implemented corrective measures to harden its security posture.