Cyber Resilience Act (CRA)
Reporting Vulnerabilities and Security Incidents
ProMinent GmbH places great importance on the cybersecurity of its products and digital solutions. In line with the requirements of the Cyber Resilience Act (CRA), we take reports of potential security vulnerabilities and security-related incidents seriously and assess them through a defined process.
Cyber Resilience Act (CRA) – Reporting Security Vulnerabilities
ProMinent GmbH places great importance on the cybersecurity of its products and digital solutions. In line with the requirements of the Cyber Resilience Act (CRA), we take reports of potential security vulnerabilities and security-related incidents seriously and assess them through a defined process.
Please provide the following information whenever possible:
- Product name and affected version
- Description of the identified vulnerability or incident
- Technical details required to reproduce the issue
- Assessment of the potential impact
- Date of discovery
- Any implemented or known mitigation measures
- Your contact details for possible follow-up enquiries
Responsible Disclosure
All reports are treated confidentially and reviewed by our specialists. Where necessary, ProMinent will take appropriate measures to mitigate risks and remediate the reported vulnerability.
We kindly request that identified vulnerabilities are not disclosed publicly until ProMinent has had sufficient opportunity to analyse the report and implement appropriate corrective measures.