CoolR VistaZ security facts

Customer information, updated 3 November 2026

Recent reports about refrigeration cyberattacks have prompted questions about connected cooler equipment. VistaZ monitors coolers and does not control their refrigeration operation. For customer-data safeguards and CoolR's wider security program, see CoolR Data Security.

Refrigeration controls remain separate

VistaZ does not control the compressor, thermostat, temperature setpoint or defrost cycle, and cannot change cooling temperatures. Changes to VistaZ monitoring settings do not change these refrigeration controls. This separation applies across VistaZ configurations, including OEM integrations.

Local configuration requires authentication

Each VistaZ has its own password for normal local configuration. Bluetooth configuration requires both physical proximity within Bluetooth range and authentication. Being nearby alone does not grant access.

Cloud communication starts at the device

VistaZ initiates its routine network connections, which use TLS. Responses from the server can include configuration instructions or update data. These communications support the monitoring device and do not provide a command path to the refrigeration controls.

Security review and testing

CoolR performs regular code reviews, including reviews of device firmware. Our security work has also included customer-led penetration testing.

Practical steps for customers

Keep device and account credentials private and limit access to authorized personnel. Use CoolR-supported software and contact your usual CoolR support representative if you notice unexpected settings changes or loss of monitoring. Review any separate refrigeration controllers with their supplier and your IT team.

For suspected vulnerabilities, use the reporting channel in our Vulnerability Disclosure Policy. For a customer security review, contact your CoolR representative.