August Smart Lock Pro (3rd Generation)

```

Device Name	August Smart Lock Pro (3rd Generation)
Brand	August (Assa Abloy)
Type	Smart Door Lock
Released	2017
Current Firmware	Regular OTA updates

Device Category

Criterion	Score	Justification
Known hardware tampering	2 (Rare)	Lock installed on inside of door. Includes tamper alerts if lock is removed, but physical attack is possible with tools. August Tamper Alarm
Known vulnerabilities	2 (Rare)	Some Bluetooth-related vulnerabilities demonstrated in research, but practical exploitation requires close proximity. Smart Lock Security Research
Prior attacks	1 (None)	Smart locks have not been targeted by mass botnet campaigns. Physical security is primary concern rather than remote attacks. Botnet Target Analysis
Updatability	1 (Very common)	August regularly releases firmware updates with security improvements and new features. Firmware Updates

Device Category Score: 2

Criterion	Score	Justification
Authentication with other systems	1 (Full)	Lock communicates with August cloud services via August Connect bridge using strong authentication. Each lock has unique security credentials. August Security Overview
Communications	2 (Encrypted with obsolete encryption)	Cloud communications use TLS. Bluetooth communication with phones is encrypted, but older Bluetooth implementations have had weaknesses. Bluetooth Security
Storage	2 (Encrypted with obsolete encryption)	Lock stores encrypted digital keys and user credentials. Encryption implementation has not been fully independently audited. IoT Key Storage Research

System Category Score: 2

Criterion	Score	Justification
Account management	1 (Full)	August accounts support extensive user management including temporary keys, scheduled access, and permission levels. Guest Access
Authentication	1 (Secure)	August accounts support two-factor authentication. App also requires biometric or PIN authentication to unlock. Smart Lock Authentication
Brute-force protection	1 (Exist)	Lock has protections against brute-force attacks on keypad (if equipped) and cloud accounts have rate limiting. Lock Security
Event logging	1 (Access event logged)	Detailed lock/unlock history available in app, showing who unlocked door and when. Activity History
Passwords	1 (Require change after setup with complexity requirements)	August accounts require strong passwords. Users are prompted to enable 2FA during setup. Password Policy

User Authentication Category Score: 1

GRAS Total: 5

Final Grade: A- (Low Danger Level)

```