Responsible disclosure
Report a security vulnerability We take the security of PlantGuard seriously. If you believe you have discovered a security vulnerability in PlantGuard software, infrastructure or services, please report it privately to our security team using the form below or by e-mail to security@plantguard.ai .
Disclosure policy
Scope
The PlantGuard.ai application and its installer and update packages, the plantguard.ai website and customer portal, and services operated by PlantGuard.
Please include
A description of the vulnerability and where it is Reproduction steps The affected version The potential impact as you understand it Screenshots or log excerpts where they help (described here, sent on request) How we can reach you, if you want an acknowledgement Test only what you are authorized to test
PlantGuard is installed inside customers' plant networks. Do not test against any customer installation. Test only against an installation you own or are explicitly authorized to assess, or against the public website in a non-disruptive way.
Prohibited
Destructive testing, or any action that alters or deletes data you do not own Unauthorized access to systems, accounts or data, including customer data or other users' portal accounts Social engineering of PlantGuard staff, customers or partners Denial-of-service testing of any kind Physical attacks, and testing of third-party services we use but do not operate What we commit to
We will acknowledge a report that includes a contact address, keep you informed of our assessment, fix confirmed issues in a supported release, and credit you in the release notes if you wish. We do not run a paid bounty programme and do not pursue legal action against researchers who act in good faith within this policy.
Machine-readable contact: /.well-known/security.txt .
