Independent offensive-security testing by Workstreet found zero Critical, High, Medium, or Low vulnerabilities across the externally reachable attack surface of the Symmatrics Key Distribution Center.
Workstreet combined tool-assisted testing with strict manual verification across the full externally reachable surface of the KDC, covering — among others:
External, unauthenticated black-box assessment of the in-scope host, testing real-world resilience against outside threats.
Recognized industry methodologies including the OWASP Top 10 (2021).
Every candidate signal from tooling was manually verified by dedicated testers for accuracy and real-world applicability.
One reflected-input candidate was investigated and did not reproduce under a context-breaking payload — recorded as a validated false positive, not a finding.
A single informational observation: no security.txt published at the expected path. Recommended as a minor hardening step.
Symmatrics
Workstreet
Sep 12, 2026
Informational
No confirmed weaknesses across the external surface.
Full report available upon request. Press release forthcoming in the PR library.