Whisker Litter-Robot 4

Security Grade

Calculator v1

   Brand: Whisker (Parent: Whisker (AutoPets))

   Category: Smart self-cleaning litter box • Model / Gen: Litter-Robot 4 Litter-Robot 4

   Release Date: 2022-05-10 • Status: In sale

   Classification Date: 2026-10-25 • Official Website

Security Evaluation

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	LR3 teardown shows an ESP32, exposed programming and UART pads and resin coating. LR4 uses a similar embedded design; physical access is required.
Known vulnerabilities	Rare	🔗 Proof	Public research exists for LR3 API and firmware, but no LR4-specific CVE or confirmed exploit was found.
Prior attacks	None	🔗 Proof	No documented field attack or botnet use. The published work is a teardown and analysis, not an attack campaign.
Updatability	Very common	🔗 Proof	WhiskerOS and the app receive frequent OTA updates, with multiple releases per year.
Category Score	Score: 2 / 3

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	Cloud API uses account and robot identifiers with tokens. Local control is not an open unauthenticated API.
Communications	Encrypted with up-to-date encryption	🔗 Proof	App and cloud traffic uses HTTPS and TLS, and no deprecated protocol is documented.
Storage	Encrypted with obselete encryption	🔗 Proof	Whisker does not publish local flash encryption details, so this is treated as partial rather than proven up-to-date.
Category Score	Score: 2 / 3

Criterion	Value	Proof	Comment
Account management	Basic	🔗 Proof	Single Whisker account per household, with no documented role hierarchy.
Authentication	Basic	🔗 Proof	Email and password account plus device pairing. Mandatory 2FA is not documented.
Brute-force protection	Basic	🔗 Proof	Standard account controls, but no published device-level failed-login threshold.
Event logging	Partial logging	🔗 Proof	The app records cycles, weight and activity history, but no administrator-access audit log is documented.
Passwords	Require change after setup	🔗 Proof	No factory default account password; the user sets it at signup.
Category Score	Score: 2 / 3

Property	Details
Operating System & App	WhiskerOS (Companion App: Whisker app)
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity: Wi-Fi 2.4 GHz, Bluetooth LE
Physical (Dimensions & Mass)	Dimensions: • Mass: