Skip directly to content

Coordinated Vulnerability Disclosure

At AP Sensing, the security of our products and services is our top priority. If you discover a vulnerability, please notify us immediately so we can address and resolve it promptly.

Please Do the Following

  • Send us an email with your findings to security@apsensing.com . Preferably use our pgp-key.txt to encrypt the email. Please provide sufficient information to reproduce the issue.
  • Do not take advantage of the vulnerability or issue you have discovered, for example by downloading more data than necessary to demonstrate the vulnerability or deleting or modifying data or uploading and executing code
  • Do not reveal the problem to others
  • Do not use attacks on physical security, social engineering, distributed denial of service, spam or applications of third parties

What We Promise

  • We will respond to your report within 3 business days with our evaluation of the report and an expected resolution date
  • If you have followed the instructions above, we will not take any legal action against you in regard to the report. This does not apply if there are recognizable criminal or intelligence-related intentions
  • We will handle your report privately and do not pass your personal details to third parties without your permission
  • We will keep you informed of the progress towards resolving the problem

 

We appreciate all security researchers who report vulnerabilities to us. However, please be aware that we do not provide monetary compensation or other rewards for security findings. We ask that you submit reports with the understanding that this is a voluntary effort to improve our security.