Report a Security Vulnerability
Alimak Group is committed to the security of our products and digital services throughout their supported lifetime.
If you believe you have identified a potential security vulnerability in an product, software, digital service or associated system from Alimak Group, we encourage you to report it to us so that we can investigate and take appropriate action.
How to report a vulnerability
Please report potential security vulnerabilities to:
To help us investigate efficiently, please provide as much of the following information as possible:
- Product name and model
- Product or software version
- Description of the vulnerability
- Steps required to reproduce the issue
- Potential security or safety impact
- Proof of concept, logs or screenshots, if available
- Your contact information for follow-up
Please do not include sensitive customer data, personal data, passwords, cryptographic keys or other confidential information unless specifically requested by Alimak Group.
What happens after you report
Alimak Groups Product Security Incident Response Team (PSIRT) will review the reported vulnerability, assess its potential impact and coordinate investigation and remediation with the relevant product organization.
We aim to acknowledge vulnerability reports within 5 business days and will communicate with the reporter as appropriate during investigation and remediation.
We ask reporters to act responsibly and not publicly disclose vulnerability details until Alimak Group has had reasonable time to investigate and, where appropriate, make corrective measures available.
Cyber Resilience Act
Alimak Group handles product security vulnerabilities in accordance with applicable cybersecurity legislation, including the EU Cyber Resilience Act (Regulation (EU) 2024/2847). Where a vulnerability or security incident meets the reporting requirements of the Cyber Resilience Act, Alimak Group will fulfil the applicable regulatory notification obligations.