Hi, Do you know how Performance, Scalability and Security Evaluation performed in Node-Red ...?
I know that a number of organisations have undertaken security reviews. However, to the best of my knowledge, none have released their data.
Plenty has been written in the forum about securing Node-RED but without a professional security audit, that doesn't count for much. Also, because there are so many ways to use Node-RED it probably isn't really feasible to do anything but an audit of your live system. Which you should do anyway of course if you are connecting it to the Internet in any commercial or public sector setting. That isn't a Node-RED thing but a basic requirement for any system.