A system and method for evaluating and altering, if necessary, the potential for a cyber security attack on an individual embedded device located on a local network assumed to be protected from outside cyber threats. In a first level of potential exposure the system attempts to send an outgoing message to a known IP address on a network outside the local network. If the outgoing messages are confirmed as received the embedded device has access to outside networks. In a second level of potential exposure the known outside IP address attempts to send an incoming message to the embedded device. If the incoming message is received the embedded can be accessed from an external network.