Hi Alex,
We’re glad to hear you found VNC Connect easy to use, manage and deploy. Though, we are sorry to hear that your wider experience with VNC Connect doesn’t appear to have met your expectations.
We'd like to affirm that VNC Connect is a remote access solution for businesses. Thousands of leading organizations, operating across a range of industries, use and trust VNC Connect every day for secure remote device access and support.
You've also made a couple of comments regarding the security of VNC Connect that we’d like to address too.
Firstly, you say that “[VNC Connect has] options for strong encryption and authorization but don't do that by default”.
128-bit AES is the default, out-of-the-box setting for all our subscription types. It is enforced as standard, so non-encrypted connections will fail. Authentication is set to System Authentication (e.g. Windows Password) by default as well, meaning connections authenticate against the remote computer’s OS. Furthermore, only members of the remote computer’s "administrators" group have access via VNC Connect by default, further securing access. You can change this setting as an Administrator, but VNC Connect’s default setup is secure.
If you’re connecting via the cloud (which is required for any connections over the internet), then access must be made from a VNC Viewer signed into a RealVNC account (which has device authentication enabled by default, upgradeable to 2FA TOTP), and the user must be given discovery permission for the VNC Server(s) before they even hit the authorization layers above. Again, it’s a very secure setup.
Secondly, you say that "any direct access solution brings the risk of whatever is on your remote computer into the environment, and that comes with a risk of cross-contamination”.
VNC and Remote Frame Buffer (RFB) protocols transmit visual desktop updates (frame buffer/pixels) from the remote device (Server) to your computer (Viewer), and the Viewer sends keyboard and mouse events back to the Server. As such, there is no additional data channel that puts the two devices in direct communication.
Security is at the core of everything we do at RealVNC. We adhere to four fundamental security principles to ensure we build and offer a remote access solution that’s secure for customers. That commitment to security is also reflected in the recent security audit that VNC Connect underwent. The vigorous, independent white box audit by Cure53 (which you can read via the "See how VNC Connect improved" link below) found that, of 38 security-relevant discoveries, none were critical. Only three were deemed ‘high severity’ and they were fixed immediately.
Of course, our work is never done, and we’re always adding new features and functionality to further improve VNC Connect and its offering. We’d be happy to discuss your review with you in more detail and better understand your experience with our product. If you’d like to chat, please email us at outreach@realvnc.com.
Regards,
Josh from RealVNC
See how RealVNC improved