A test apparatus for testing a security of communication of a device under test, DUT, , the test apparatus comprising: an RF unit having an RF interface adapted to receive from the device under test, DUT, an RF signal carrying Internet Protocol, IP, data including at least one IP address; and an IP unit adapted to analyse IP data carried in the received RF signal to check communication security of the device under test, DUT, wherein a communication security provided by the device under test, DUT, is evaluated on the basis of metrics applied to different security criteria, SC-CEP, related to the communication endpoint, CEP, addressed by the IP address, metrics applied to different security criteria, SC-DUT, related to the device under test, DUT, and metrics applied to security criteria, SC-IPC, related to the IP connection between the device under test, DUT, and the communication endpoint, CEP, addressed by the IP address to calculate an overall security communication score value of the device under test, DUT, ; characterized in that the security criterion, SC-CEP, related to the communication endpoint, CEP, addressed by the IP address is read by said IP unit from a communication endpoint look-up table, LUT, stored in a memory (5; 9); and if the calculated overall security communication score value is beneath a configurable threshold value, some or all applications of the device under test are partially or completely deactivated, a list of alternative communication endpoints is loaded from a database connected to the test apparatus , and the calculated overall security communication score is exported to an external processing unit. an RF unit having an RF interface adapted to receive from the device under test, DUT, an RF signal carrying Internet Protocol, IP, data including at least one IP address; and an IP unit adapted to analyse IP data carried in the received RF signal to check communication security of the device under test, DUT, wherein a communication security provided by the device under test, DUT, is evaluated on the basis of metrics applied to different security criteria, SC-CEP, related to the communication endpoint, CEP, addressed by the IP address, metrics applied to different security criteria, SC-DUT, related to the device under test, DUT, and metrics applied to security criteria, SC-IPC, related to the IP connection between the device under test, DUT, and the communication endpoint, CEP, addressed by the IP address to calculate an overall security communication score value of the device under test, DUT, ; characterized in that the security criterion, SC-CEP, related to the communication endpoint, CEP, addressed by the IP address is read by said IP unit from a communication endpoint look-up table, LUT, stored in a memory (5; 9); and if the calculated overall security communication score value is beneath a configurable threshold value, some or all applications of the device under test are partially or completely deactivated, a list of alternative communication endpoints is loaded from a database connected to the test apparatus , and the calculated overall security communication score is exported to an external processing unit. <EOS>