Vulnerability Disclosure Policy
- Fiberroad Official
Last Updated: November 2026
Industrial Cybersecurity Commitment
Fiberroad is committed to product security, reliability, and compliance with regulations such as the European Union Cyber Resilience Act (CRA). The Product Security Incident Response Team (PSIRT) proactively protects hardware, firmware, and software, welcoming reports from the security community.
How to Report a Vulnerability
Report potential security issues directly to the dedicated PSIRT team:
Dedicated Security Email: security@fiberroad.com
Please include:
- Affected Product: Model name, hardware, and firmware/software version.
- Vulnerability Description: Details of the exploit or weakness.
- Steps to Reproduce: Technical steps, screenshots, or PoC code.
Coordinated Vulnerability Disclosure Process
Fiberroad follows a structured timeline to address and disclose reports:
- Acknowledgment: Confirmed within 24 to 48 hours.
- Personnel Assignment: A dedicated PSIRT expert is assigned.
- Internal Triage: Escalated to R&D for assessment within 5 business days.
- Remediation & Deployment: Patches, updates, or workarounds are developed and deployed.
- Public Announcement: Advisories are published and researchers are credited (with agreement).