Reporting security vulnerabilities
The security of our products is a priority. If you have identified a potential vulnerability in a SOLEXY product or service, please contact us: we will work with you to resolve it responsibly.
Contact
Email: security@solexy.net
What to include in your report
- Description of the vulnerability and its impact
- Product and version (firmware / hardware)
- Steps to reproduce or proof of concept
- Your contact details
Our commitments
We acknowledge receipt within 5 business days, keep the reporter informed, and publish an advisory in a coordinated manner (as a rule within 90 days). If you act in good faith and in compliance with our Coordinated Vulnerability Disclosure Policy, we will not take legal action against you (safe harbour).
Product support period
We provide security updates for at least 5 years from product release, or for as long as the equipment is being sold, whichever is longer.