Security Issue

Please include as much of the following information as possible in your report: 

• Product name and version 

• Description of the vulnerability 

• Steps to reproduce the issue 

• Code of any PoC you may have developed 

• Potential impact 

• Any proof-of-concept or supporting materials 

 Our Commitment 

• We will acknowledge receipt of your report within 5 business days 

• We will investigate and validate all reports promptly 

• We will work to remediate confirmed vulnerabilities in a timely manner 

• We may contact you for additional information during our investigation 

• We may, with your express consent, publicly recognize you or your organization for a valid vulnerability report after remediation or coordinated disclosure, subject to applicable law. Public recognition is optional and we may decline, delay, or modify public recognition where necessary for safety, legal, regulatory, confidentiality, sanctions, export-control, third-party, or operational reasons.  Note, we do not offer any economic compensation for reporting of vulnerabilities or weaknesses in our products. 

Responsible Disclosure 

We kindly request that you: 

• Do not publicly disclose the vulnerability until we had the opportunity to investigate and address it. We also ask you not to share it with other parties without prior written consent from us. Provide us with at least 90 calendar days before public disclosure, unless we agree to a different coordinated disclosure timeline as some vulnerabilities may require longer remediation timelines. 

• Avoid actions that may harm systems, data, or users 

• Act in good faith 

Safe Harbor 

Particle Measuring Systems will not pursue legal action against individuals who: 

• Discover vulnerabilities in good faith 

• Follow this disclosure policy 

• Do not exploit vulnerabilities for malicious purposes 

 Security Advisories 

 Stay informed about known issues, fixes, and security updates by visiting our Security Advisories page. We publish timely advisories detailing identified vulnerabilities, their impact, and recommended remediation steps to help you protect your systems. Please review this page regularly to ensure you have the latest security information.

Disclosure 

When appropriate, we will publish information about resolved vulnerabilities in security advisories or release notes through our communication channels.  Review our Vulnerability Disclosure Policy.