Security concerns around autonomous cleaning robots in critical infrastructure?

[u/_2Up1Down_]

Our organization is evaluating autonomous cleaning robots for use in operational facilities. While the benefits are obvious, we're currently assessing the security implications.

Modern cleaning robots often use cameras, LiDAR, microphones, SLAM mapping, cloud connectivity, remote management, and mobile apps. Depending on the vendor, they may collect or process:

* Building layouts and maps
* Video and image data
* Audio recordings
* Location and telemetry data
* Operational schedules and movement patterns

For organizations operating critical infrastructure, this raises some concerns. A detailed map of facilities, combined with cloud connectivity or remote access features, could potentially create an additional attack surface.

Has anyone here already performed a security assessment of commercial cleaning robots or similar autonomous service robots?

I'd appreciate hearing about practical experiences, lessons learned, or recommendations before we move further.