Flock Publishes 2026 Penetration Test Results

Atlanta, GA, Sept. 22, 2026 /CourierPR/ -- Flock, the leading safety technology platform dedicated to creating thriving communities, today released the results of its 2026 annual penetration test, conducted by Bishop Fox, one of the most respected offensive security firms in the country. The engagement ran from January 12 to March 27, 2026, and covered Flock's physical hardware, software, and mobile applications. Bishop Fox identified 36 findings across the tested systems, including 16 Medium findings, including 13 that were remediated and independently verified. None of the findings identified in this year's engagement resulted in any customer data or systems being accessed by anyone outside the company as a result of this testing.

Flock’s Chief Information Security Officer, Chris Castaldo, emphasized the company’s commitment to transparency and advanced cybersecurity.

One significant remediation was the addition of Secure Boot, using Android Verified Boot, to older ALPR cameras. Secure Boot helps prevent unauthorized software from running on a device, protecting the limited number of images stored locally if a device is stolen or otherwise compromised. Bishop Fox independently verified the remediation. The finding did not provide access to Flock's cloud environment or cloud-stored images.

Another Medium-severity finding remains open because addressing it architecturally would require a long-term hardware and operating-system upgrade for Flock's first-generation Falcon cameras. Flock agreed with Bishop Fox's recommendation and is evaluating the appropriate migration path. In the meantime, Flock's engineers maintain the Android-based platform in-house and can develop and deploy security updates independently. Flock has deployed hardened custom firmware to this hardware and will continue to backport security patches as new issues are identified.

Flock conducts an independent penetration test annually at a minimum, alongside internal red-teaming, automated code scanning, ongoing vulnerability management, and a dedicated Offensive Security & Vulnerability Operations team.

Flock, a leading safety technology platform, has published the results of its 2026 annual penetration test, which was conducted by Bishop Fox, a respected offensive security firm. The engagement spanned from January 12 to March 27, 2026, and covered Flock's physical hardware, software, and mobile applications. Bishop Fox identified 36 findings across the tested systems, including 16 Medium findings, including 13 that were remediated and independently verified. No customer data or systems were accessed by anyone outside the company as a result of this testing.

Flock's Chief Information Security Officer, Chris Castaldo, highlighted the company's commitment to transparency and advanced cybersecurity.

One significant remediation involved the addition of Secure Boot, using Android Verified Boot, to older ALPR cameras. Secure Boot helps prevent unauthorized software from running on a device, protecting the limited number of images stored locally if a device is stolen or compromised. Bishop Fox independently verified the remediation. The finding did not provide access to Flock's cloud environment or cloud-stored images.

Another Medium-severity finding remains open because addressing it architecturally would require a long-term hardware and operating-system upgrade for Flock's first-generation Falcon cameras. Flock agreed with Bishop Fox's recommendation and is evaluating the appropriate migration path. In the meantime, Flock's engineers maintain the Android-based platform in-house and can develop and deploy security updates independently. Flock has deployed hardened custom firmware to this hardware and will continue to backport security patches as new issues are identified.

Flock conducts an independent penetration test annually at a minimum, alongside internal red-teaming, automated code scanning, ongoing vulnerability management, and a dedicated Offensive Security & Vulnerability Operations team.