AVAT takes all reports of potential security vulnerabilities and security-relevant incidents in its products seriously. If you have discovered a vulnerability or security-relevant flaw in an AVAT product, we encourage you to report it to us confidentially through the contact channel below.

What to report here

• Suspected or confirmed vulnerabilities in AVAT products

• Security relevant malfunctions that could affect availability, integrity, authenticity, or confidentiality

• Potentially insecure default configurations

   

What not to report here

This channel is dedicated to security reports only. It is not intended for general support requests, complaints, or non-security fault reports. For standard product support, please use our regular service and support channels.

Information to include in your report

• Product name

• Version, firmware, or software release

• Affected component or function

• A description of the vulnerability

• Prerequisites and attack vector

• Potential impact on operations, plant, or data

• Steps to reproduce, a proof of concept (PoC), or relevant log excerpts

• Your contact details for any follow-up questions

   

Confidentiality &
Responsible Disclosure

We kindly ask that you do not publicly disclose any vulnerability until we have coordinated the disclosure with you. Our goal is a coordinated, responsible disclosure process that protects operators, plants, users, and the environment.

Legal Notice

This contact point is intended for reporting vulnerabilities to AVAT as the manufacturer. Any statutory notifications from the manufacturer to authorities or competent bodies are handled separately, in line with the applicable regulatory requirements.