Skip to content
← Back to home
Draft — to be reviewed before launch

Security & disclosure

Security & coordinated vulnerability disclosure

We build a security product for industrial networks. If you find a weakness in it, we want to hear from you.

  1. 1

    Scope

    The Aragog edge sensor and its software, the Aragog cloud platform and APIs, and update and provisioning infrastructure. This marketing website is in scope for issues that affect visitors.

  2. 2

    How to report

    Email the security contact below with a description, affected component and version, reproduction steps and your assessment of impact. Encrypt sensitive details if you can. Please do not test against customer sites or production sensors.

  3. 3

    What we commit to

    We acknowledge reports within three working days, keep you informed while we fix, and credit you in the advisory if you wish. Actively exploited vulnerabilities are reported under the Cyber Resilience Act within 24 hours.

  4. 4

    Safe harbour

    We will not pursue legal action against good-faith research that respects this policy, avoids privacy violations and service disruption, and gives us reasonable time to fix before disclosure.