Reporting security vulnerabilities

If you have discovered a potential security vulnerability in a SYS TEC electronic product, software component, piece of documentation or on the SYS TEC electronic website, you can report it via the relevant PSIRT. On this page, you will find the contact details, recommended information to include in your report, details on encrypted transmission, and the process for handling and disclosing reported vulnerabilities.

At SYS TEC electronic, we attach great importance to the security of our products. Nevertheless, it is widely recognised that no product or customer system can be 100% secure, regardless of how much effort is invested in product security. SYS TEC electronic therefore wishes to be informed of any potential security issues affecting our products so that we can take the necessary measures as quickly as possible and rectify any vulnerabilities without delay. The Product Security Incident Response Team, or PSIRT for short, oversees the process of receiving and handling reports of potential security vulnerabilities in our products, including hardware, software and documentation.

The Computer Security Incident Response Team (CSIRT) at SYS TEC electronic AG is responsible for internal matters and the website.

Process for handling reports

Once a report has been submitted, SYS TEC electronic follows the process below to assess the potential security vulnerability and respond to it:

1. Notification: SYS TEC electronic becomes aware of a potential security vulnerability.
2. Initial assessment: SYS TEC electronic reviews the report to determine whether a SYS TEC electronic product or service may be affected and whether sufficient information has been provided.
3. Technical analysis: SYS TEC electronic investigates the reported potential security vulnerability in more detail.
4. Remediation: SYS TEC electronic takes appropriate measures to address confirmed security vulnerabilities in its products and services.
5. Disclosure: Where appropriate, SYS TEC electronic discloses information about the confirmed security vulnerability and makes the remedial measures available.

Responsible Disclosure Policy

Like most companies in the technology sector, SYS TEC electronic follows a Responsible Disclosure Policy. Our policy outlines what you can expect from SYS TEC electronic and what we expect from you. It is based on the CERT® Guide to Coordinated Vulnerability Disclosure. Before submitting a report, please read through our policy, as it sets out the basis of our relationship with you.

Download Responsible Disclosure Policy