Security

This page outlines important security practices when using the Balluff Update Platform (BUP). Following these recommendations helps protect your systems and ensures the integrity of downloaded artifacts.

Use HTTPS

Always access the Balluff Update Platform via HTTPS. The URL is:

https://update.balluff.systems

Warning

Never access the platform over plain HTTP. HTTPS encrypts all communication between your browser and the server, protecting against eavesdropping, man-in-the-middle attacks, and data tampering.

Your browser should display a lock icon in the address bar, confirming that the connection is secured with a valid TLS certificate. If the lock icon is missing or your browser shows a certificate warning, do not proceed and contact your IT department.

Verify file integrity after download

Every time you download a file from BUP, you should verify its integrity by comparing the SHA-256 hash of the downloaded file with the hash displayed on the platform. This ensures the file has not been corrupted during transfer or tampered with by a third party.

For detailed instructions on how to calculate and compare hashes, see Check file integrity.

Hint

Make hash verification a standard part of your download workflow — especially for firmware files that will be installed on production devices.

Keep firmware and software up to date

Regularly check BUP for new releases for your products. Firmware and software updates often contain important security patches that address known vulnerabilities. Using outdated firmware may expose your devices to security risks.

Hint

Use the Recommended release state as a guide — it indicates the actively maintained and fully supported version.

Use the API securely

If you use the BUP API for automated updates, ensure the following:

Always use HTTPS endpoints.

For API details, refer to the API documentation accessible via the platform menu.

Report security concerns

If you discover a potential security vulnerability in your Balluff products or the update platform, please contact Balluff immediately through the official support channels.