Security & disclosure
Security & coordinated vulnerability disclosure
We build a security product for industrial networks. If you find a weakness in it, we want to hear from you.
Security contact
security@aragogsecurity.com- 1
Scope
The Aragog edge sensor and its software, the Aragog cloud platform and APIs, and update and provisioning infrastructure. This marketing website is in scope for issues that affect visitors.
- 2
How to report
Email the security contact below with a description, affected component and version, reproduction steps and your assessment of impact. Encrypt sensitive details if you can. Please do not test against customer sites or production sensors.
- 3
What we commit to
We acknowledge reports within three working days, keep you informed while we fix, and credit you in the advisory if you wish. Actively exploited vulnerabilities are reported under the Cyber Resilience Act within 24 hours.
- 4
Safe harbour
We will not pursue legal action against good-faith research that respects this policy, avoids privacy violations and service disruption, and gives us reasonable time to fix before disclosure.