Security
How to report
1
Email security@cergen.com
This is our single channel for product security matters.
2
We acknowledge within 5 business days
and tell you who is handling your report.
3
We analyse and fix
with a progress update at least every 30 days.
4
We disclose and credit you
in a security advisory, with your consent.
Please include
- Product model and firmware version
- A description of the vulnerability and its potential impact
- Steps to reproduce, required confiquration or tools
- How to contact you, and whether you wish to be credited
Please do not attach executables. Test only on devices you own or are authorised to test.
Our commitments
5
business days to acknowledge
30
days between progress updates, at most
90
day coordinated disclosure window
Free
security updates during the support period
Fullterms are in our Coordinated Vulnerability Disclosure Policy.We wil not pursue legal action against anyone who reports in good faith and in accordance with that policy.
