Google Pixel Tablet (GTU8P)

Google Pixel Tablet (GTU8P)
Security Grade A- Calculator v	Google Pixel Tablet (GTU8P) Brand: Google (Parent: Google LLC (Alphabet Inc.)) Category: Tablet • Model / Gen: 2023 model GTU8P; 128 GB or 256 GB storage variants Release Date: 2023-06-20 • Status: Classification Date: • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	https://blog.google/products-and-platforms/devices/pixel/introducing-google-tensor/ 🔗 Proof	Qualitative resistance rating: Titan M2 provides hardware protection against invasive attacks, but the tablet has accessible physical ports. This is not an incident-frequency statistic.
Known vulnerabilities	Very common	https://source.android.com/docs/security/bulletin/pixel/2025-12-01 🔗 Proof	Recurring Pixel/Android platform vulnerabilities are publicly documented. This is a qualitative shared-software rating, not a Tablet-specific CVE count; patched devices are not asserted to remain vulnerable. Dock-only issues are excluded from the tablet assessment.
Prior attacks	Rare	🔗 Proof	Pending: Google reports limited targeted exploitation of CVE-2024-32896 at Pixel-platform level. This does not identify Pixel Tablet victims or establish its IoT-attack frequency; no model-specific rating is assigned.
Updatability	Very common	https://developers.google.com/android/ota 🔗 Proof	Official OS and security update support continues until June 2028. Repeated vendor-delivered software updates support this rating; no claim of immediate delivery to every device is made.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	Mutual TLS and EAP-TLS are supported with configured certificates (pp. 77-78). Partial: mutual authentication is not universal across arbitrary apps and services.
Communications	Encrypted with up-to-date encryption	🔗 Proof	TLS 1.2 and WPA2/WPA3 provide modern encryption (pp. 77-78). Rating covers configured encrypted channels, not every app, open Wi-Fi, or all traffic by default.
Storage	Encrypted with up-to-date encryption	https://source.android.com/docs/security/features/encryption/file-based 🔗 Proof	Internal user/application data uses AES-based file encryption (pp. 8, 73). This does not mean every boot or firmware partition is encrypted.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	https://support.google.com/googlepixeltablet/answer/13554937?hl=en-GB 🔗 Proof	The owner can add and delete separate user profiles; users manage their own lock credentials. Secondary users have less device-management authority than the owner.
Authentication	Secure	https://support.google.com/googlepixeltablet/answer/13591685 🔗 Proof	Secure in the stated managed, screen-locked configuration: fingerprint with backup credential, and ownership verification after protected factory reset. Unprotected retail setups are outside this rating.
Brute-force protection	Exist	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11419-st.pdf 🔗 Proof	Gatekeeper throttles failed credentials. The model-inclusive evaluation also documents fingerprint lockouts and configurable failed-password wipe limits (p. 84); enterprise wipe policy is configuration-dependent.
Event logging	Access event logged	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11419-st.pdf 🔗 Proof	Access-attempt logging is supported in the managed configuration with security logging enabled (pp. 65-67). This is not claimed to be enabled by default on unmanaged tablets.
Passwords	Require change after setup with complexity requirements	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11419-st.pdf https://support.google.com/googlepixeltablet/answer/13554937?hl=en-GB 🔗 Proof	Selected assessment scenario: enterprise policy requires a compliant, user-created password with complexity rules (ST p. 47). The closest form option represents mandatory establishment/change to a compliant credential, not rotation of a factory password. Retail screen lock is optional; this is not a default-setting claim.
Category Score	Score: 1 / 3

Technical Specifications

Property	Details
Operating System & App	Android; Android 14 is the documented security evaluation baseline (Companion App: Google Home (optional smart-home integration))
Hardware (CPU / GPU)	CPU: Google Tensor G2; Titan M2 security coprocessor • GPU: Not specified in Google's published tablet specifications
Memory & Storage	Memory: 8 GB LPDDR5 RAM • Storage: 128 GB or 256 GB UFS 3.1 internal storage
Power, Battery & Charging	Battery: Built-in 27 Wh rechargeable battery • Power: Battery-powered; external power via USB-C or Charging Speaker Dock • Charging: USB-C charging; Charging Speaker Dock supports up to 15 W
Display & Camera	Display: 10.95-inch LCD; 2560 x 1600; 276 ppi; typical 500 nits • Camera: 8 MP front and 8 MP rear cameras; 1080p video at 30 fps
Sound & Connectivity	Sound: Quad-speaker audio; three microphones • Connectivity: Wi-Fi 6 (2.4/5 GHz, 2x2 MIMO); Bluetooth 5.2; UWB; USB-C 3.2 Gen 1; 4-pin dock connector; Google Cast
Physical (Dimensions & Mass)	Dimensions: 258 x 169 x 8.1 mm (tablet only) • Mass: 493 g (tablet only)

Assessment of Google Pixel Tablet (GTU8P), based on public vendor documentation, not physical-device testing. Release date 2023-06-20 is the documented first-availability date: https://blog.google/products-and-platforms/devices/pixel/26-helpful-pixel-tablet-tips-and-features/ . Hardware specifications: https://support.google.com/googlepixeltablet/answer/13555146?hl=en . GPU details are not specified in that source.

Security assessment scope: an enterprise-managed deployment with a required complex lock credential, security logging enabled, protected boot, configured certificate authentication, and encrypted network connections. This is a declared configuration scenario, agreed for the assessment; it is not a claim that a physical device was configured or that these are retail defaults. The model-inclusive Android 14 Security Target is a version-specific evidence baseline, not a claim that Android 14 is the latest software in 2026. Rating wording is constrained by the form. Passwords maps mandatory establishment/change of a policy-compliant credential to the nearest available option.

Hardware tampering and known-vulnerability levels are qualitative assessments, not measured frequency statistics. Platform-wide vulnerability/targeted-exploitation reports do not prove this model was used in an IoT attack. Prior attacks remains pending. Encrypted storage refers to internal user/application data, not every firmware partition. Support updates are guaranteed until June 2028; current sales status has not been authoritatively established, so the optional Status field remains pending.