Product Security (PSIRT)

ABOUT UDLIVE PSIRT

The UDlive Product Security Incident Response Team (PSIRT) is responsible for receiving, assessing and responding to reports of potential security vulnerabilities affecting UDlive products, firmware, cloud services and supporting software.

UDlive PSIRT works with security researchers, customers, partners and industry bodies to investigate reported issues, develop and validate remediation, and communicate the outcome to affected customers. We follow a coordinated disclosure approach: we ask reporters to give us a reasonable opportunity to investigate and remediate an issue before any details of it are made public.

UDlive PSIRT handles product security specifically. Questions about how we process personal data are answered in our Privacy Policy, and general enquiries should go through our contact page.

HOW TO REPORT A POTENTIAL SECURITY VULNERABILITY

Please report suspected security vulnerabilities in any UDlive product or service by email to psirt@udlive.io.

All exchanges with UDlive PSIRT, and all reports submitted to it, must be provided in English.

We will acknowledge receipt of your report and keep you informed as our investigation progresses. Please do not disclose the issue publicly until we have had the opportunity to investigate and, where necessary, release a fix.

RECOMMENDED INFORMATION TO INCLUDE IN YOUR REPORT

To help us assess and reproduce the issue quickly, please include as much of the following as you can:

• The part number or product reference, and the version affected.
• A complete technical description of the potential vulnerability, including any related known exploits.
• How and when the potential vulnerability was discovered.
• Any public information already published about the issue, or that you plan to publish (CVE identifier, academic paper publication, conference talk, and so on).
• Your contact information, so that we can reach you during the process.

PUBLIC SECURITY ADVISORIES AND BULLETINS

Where an investigation results in a fix or a mitigation that affects deployed products, UDlive publishes a security advisory on this page. Each advisory describes the affected products and versions, the impact, the recommended remediation, and any associated CVE identifiers. Customers with a support agreement are also notified directly.