If you believe you have found a security vulnerability in a product or industrial system supplied or maintained by ONEJOON, or in an associated software, automation, remote access or OT component, please report it to us confidentially. Our Product Security Incident Response Team (PSIRT) coordinates the assessment and further handling of your report.
Contact ONEJOON's PSIRT in just a few steps. We're here to help!
Report vulnerabilityWhere known and necessary for the assessment, please provide:
Do not send passwords, credentials, personal data, exploit material or information belonging to other customers unless it is strictly necessary for the initial assessment.
If sensitive or extensive information is required, describe it first without transmitting it. We will then agree an appropriate transfer method with you.
For non-anonymous reports, we aim to provide a human acknowledgement within five business days. Where possible, we will provide an initial substantive response or a specific date for the next update within ten business days.
Statutory notifications to authorities and necessary warnings to affected users are handled independently of any coordinated public disclosure date.
Limit testing to what is necessary. Avoid damage, production interruptions, safety risks and access to data or systems belonging to third parties.
Do not carry out social engineering, phishing, denial-of-service, brute-force or physical attacks. Please do not disclose technical details without coordination where this could put users at risk.
Submitting a report does not grant general permission to test systems, industrial equipment or data belonging to ONEJOON or third parties. ONEJOON treats reports confidentially to the extent permitted by law and necessary for vulnerability handling.
Information about the processing of personal data is available in our Privacy Policy.