Security
We take the cybersecurity of our products seriously. If you have found a potential security vulnerability in a Cergen product, please report it as described below and we will work with you to address it.
How to report
Email security@cergen.com
This is our single channel for product security matters.
We acknowledge within 5 business days
and tell you who is handling your report.
We analyse and fix
with a progress update at least every 30 days.
We disclose and credit you
in a security advisory, with your consent.
Please include
- Product model and firmware version
- A description of the vulnerability and its potential impact
- Steps to reproduce, required configuration or tools
- How to contact you, and whether you wish to be credited
Please do not attach executables. Test only on devices you own or are authorised to test.
Our commitments
business days to acknowledge
days between progress updates, at most
day coordinated disclosure window
security updates during the support period
Full terms are in our Coordinated Vulnerability Disclosure Policy.We will not initiate legal action against individuals or organisations who report vulnerabilities in good faith and in accordance with that policy.