XREAL Air 2 Pro

Classification

XREAL Air 2 Pro
Classification
Grade	A
Calculator version	1
Classification date	2025-10-15
Information
Name	XREAL Air 2 Pro
Brand by Parent	XREAL by XREAL
Generation	2
Model(s)	XREAL Air 2, XREAL Air 2 Pro
Release date	2023-10-27
Type/Category	Vision System
Website	[1]
Status	In sale
More
Dimensions	148mm x 51.4mm x 161mm
Mass	75g
Operating system	Proprietary firmware
Companion App	Nebula
CPU
GPU
Memory
Storage
Battery
Power
Charging
Display
Camera
Sound
Connectivity

Device
Criterion	Value	Proof(s)	Comment
Known hardware tampering	None	[2]	Sealed consumer electronics design, not user-serviceable. No public reports of supply chain tampering.
Known vulnerabilities	Rare	[3]	The device runs minimalist firmware with a very limited attack surface. Firmware updates are delivered via the Nebula companion app to patch issues.
Prior attacks	None	[4]	No publicly documented security breaches specifically targeting the device's firmware.
Updatability	Very common	[5]	Firmware is updated regularly through the Nebula companion app on the connected host device (PC, Mac, or Android).
Category score	2

System
Criterion	Value	Proof(s)	Comment
Authentication with other systems	Full	[6]	Connects via a standard, secure USB-C DisplayPort interface. Authentication is primarily handled by the host OS.
Communications	Encrypted with up-to-date encryption	[7]	The video signal is standard DisplayPort. Any user data handled by the Nebula app is protected by the host OS's standard transport layer security (TLS).
Storage	Encrypted with up-to-date encryption	[8]	The device itself has no user storage. Data is stored on the host device, protected by its native OS-level encryption (e.g., BitLocker, Android Encryption).
Category score	1

User Authentication
Criterion	Value	Proof(s)	Comment
Account management	Full	[9]	Account management is not on the device itself but is handled by the host OS and the optional XREAL/Nebula account within the companion app.
Authentication	Secure	[10]	Authentication is performed entirely by the connected host device (e.g., phone's PIN, fingerprint, face unlock). The glasses are a display peripheral.
Brute-force protection	Exist	[11]	This protection is provided by the lock screen security of the connected host OS.
Event logging	Access event logged	[12]	All access and unlock events are logged by the security system of the connected host OS.
Passwords	Require change after setup with complexity requirements	[13]	This is handled by the host device's security policy and initial setup process.
Category score	1

Grade	A