الخدمات

What Can Be Reported?

You can use this reporting channel for potential vulnerabilities involving:

• INNOVATEST hardness testers;
• INNOVATEST desktop and mobile applications;
• INNOVATEST websites, portals and online services;

For ordinary technical problems, calibration questions, software installation assistance or warranty requests, please contact our regular support team.

Information to Include

Please provide as much of the following information as possible:

• Product name and model;
• Serial number, if available;
• Installed software or firmware version;
• Operating system version;
• Description of the potential vulnerability;
• Steps needed to reproduce the issue;
• Expected and observed behaviour;
• Possible security impact;
• Relevant network configuration;
• Screenshots, log files or diagnostic information;
• Whether you believe the vulnerability is being actively exploited;
• Whether the information has already been shared with another party.

Please remove passwords, customer measurement data and unnecessary personal information before submitting files.

Coordinated Vulnerability Disclosure Policy

We ask security researchers to follow these principles:

• Report the vulnerability privately and without unnecessary delay;
• Give INNOVATEST a reasonable opportunity to investigate and correct the issue before publication;
• Only access systems, devices and data for which you have explicit authorisation;
• Limit testing to what is necessary to demonstrate the vulnerability;
• Avoid disruption of production, measurement or safety-related processes;
• Do not alter or delete data;
• Do not install persistent access mechanisms;
• Do not download more data than is necessary to demonstrate the issue;
• Do not share credentials, personal data, customer data or confidential information;
• Stop testing and contact us immediately if sensitive information is accessed;
• Coordinate any public disclosure with the INNOVATEST support team.

Good-Faith Security Research

When you act in good faith, comply with this policy and make a reasonable effort to prevent harm, INNOVATEST does not intend to initiate legal action solely because of your security research.

If you are unsure whether your intended testing is permitted, contact service@innovatest-europe.com before proceeding.

Confidentiality and Public Disclosure

Please keep vulnerability information confidential until:

• INNOVATEST has completed its investigation;
• A security update or mitigation has been made available where necessary; and
• A coordinated publication date has been agreed.

INNOVATEST may publish information about resolved vulnerabilities, including:

• Affected products and versions;
• A description of the vulnerability;
• Its severity and potential impact;
• Available security updates;
• Workarounds or mitigating measures;
• Actions customers should take.

INNOVATEST may delay publication when early disclosure could increase the cybersecurity risk to customers.

بسيط ومستقيم

يرجى الاستفسار من قسم المبيعات لدينا عن التفاصيل كافة.