Vulnerability Disclosure Policy
At Safer Group, we take the security of our systems, products, and customers seriously.
We are committed to working with researchers and industry partners to identify and address potential vulnerabilities in a responsible manner.
Reporting a Security Issue
If you believe you have discovered a security vulnerability in any Safer Group product or service (including the Safer POD range), please contact our team directly at compliance@safer-group.com or complete the form provided on page below. When submitting a report, please include:
-
A detailed description of the issue
-
Steps to reproduce it (if possible)
-
Any supporting evidence (screenshots, logs, etc.)
-
Your contact details for follow-up communication
Our Commitment to You
Once a report is received, we will:
- Acknowledge receipt of your report within 5 working days.
- Review and assess the issue within 10 working days.
- Provide regular updates as the investigation progresses.
- Work to resolve and verify fixes as quickly as possible.
- Credit responsible researchers publicly if they wish to be acknowledged.
Responsible Disclosure Guidelines
To protect our users and systems:
-
Do not publicly disclose the vulnerability until it has been resolved.
-
Do not exploit the issue, access customer data, or disrupt our services.
-
Follow responsible reporting principles as outlined by the
IoT Security Foundation (IoTSF) Vulnerability Disclosure Guidelines.
We appreciate the efforts of our community in helping us keep our products and users safe.