Vulnerability Disclosure Policy

Maintaining the security, privacy, and integrity of our products and our customers is LACROIX’s primary concern.
Although we strive to design the most reliable and secured products and solutions, vulnerabilities may escape detection.
We are committed to creating a safe, transparent environment to report vulnerabilities so that we can fix them. We therefore encourage you to report any identified security issue through a coordinated and constructive approach.

> Contact:

If you believe you have discovered a vulnerability in a LACROIX product or system or have a security incident to report, please send an email at alert.cyber-security@lacroix.group

This email address is intended only for product or service security vulnerability disclosure.
It is not for technical support information on our products or services.
All content other than that specific to security vulnerabilities in our products or services will not be processed.

If you’d like to encrypt your communications with us, please use our PGP public key.
All security-related emails from LACROIX will be protected with PGP.

> Timeline:

LACROIX will provide prompt acknowledgment of receipt of your first email within 15 days
There will be a maximum of 30 days between 2 information emails from LACROIX.

We greatly appreciate the efforts of security researchers who share information on security issues with us, giving us a chance to improve our products and services and better protect our customers. Thank you for working with us through this process.