Vulnerable Client Updates
18/06/2026
What has changed?
The checklist used to decide wether a client is vulnerable or not has been modified. Some questions have been rephrased and others have been added. The final veredict is now binary, before the changes, the final decision could be one of three, vulnerable, not vulnerable or potentially vulnerable, which could lead to confussion. The final grading now consists of Yes the client is vulnerable or No the client is not vulnerable, granting a clearer final decision.
The update doesn't just conclude on a new check form as it has also been visually updated to match our wider platform refresh. Pictures can be seen below.
Part of a wider platform refresh
This improved vulnerable client check is the first step in a broader visual update. The same cleaner style will slowly roll out to other areas of the BAT platform over time.
Old Vulnerable Client Check
New Vulnerable Client Check
