The security of our products and solutions is important to us. That is why iNOEX has established a Product Security Incident Response Team (PSIRT). Our PSIRT confidentially receives information about potential vulnerabilities, carefully assesses each report and coordinates the necessary next steps – to protect our customers, partners and products.
If you discover a potential vulnerability in an iNOEX product, you can contact us directly. We take every report seriously and handle it professionally and responsibly.
Please report potential vulnerabilities confidentially to:
psirt@inoex.de
This channel is intended for vulnerabilities in iNOEX products, firmware and product-related software. Please use the regular support or IT security channels for general support requests, functional defects and corporate IT security incidents.
The more information you can provide, the faster we can assess the report. Helpful information includes:
Please do not send credentials, customer data or other sensitive information that is not required for the assessment. If confidential technical information is required, our PSIRT will agree a suitable secure transfer method with you.
We register and assess your report confidentially and transparently. We then verify the product and version affected, assess potential impact and coordinate any necessary technical measures with the responsible teams.
Where necessary to protect our customers or meet statutory or governmental requirements, we involve other affected parties.
These target times are not a guarantee of a specific handling or remediation time. Statutory reporting obligations and deadlines remain unaffected.
Please test responsibly and proportionately. Do not modify or delete data, access personal or customer data, disrupt systems, or coordinate any disclosure with the PSIRT first.
This policy does not constitute general permission to perform security testing or a blanket limitation of liability.
We will make reasonable efforts to coordinate handling and potential disclosure with the reporter. In doing so, we consider in particular the availability of remediation measures and the risks to our customers and products.
Statutory, regulatory, security-related or governmental obligations may require a different approach.
Upon request, we may acknowledge the reporter in a subsequent security advisory where feasible and where no security, privacy or other legal considerations prevent this.
Personal data from vulnerability reports is processed solely for assessment, handling, communication, documentation and compliance with legal obligations. Further information is available in our Privacy Notice.
Security advisories provide information about vulnerabilities fixed or mitigated in iNOEX products. They create transparency and help our customers implement any required measures.
No security advisories have been published at this time.
If you would like to report a potential vulnerability, please contact our PSIRT directly:
psirt@inoex.de
Thank you for your support and for helping us improve the security of our products.
