Hirsch Security Reporting
At Hirsch, we take security seriously and appreciate the efforts of security researchers in helping us maintain a secure environment for our customers.
Reporting a vulnerability
You can report a vulnerability in two ways: Submit the via the reporting form, or by emailing securityVDP@hirschsecure.com. Reports may be submitted anonymously. If you share contact information, we will acknowledge receipt of your report within 3 business days.
Report a Vulnerability
What we would like to see from you
In order to help us triage and prioritize submissions, we recommend that your reports:
- Describe the location (software version or hardware) the vulnerability was discovered and the potential impact of exploitation.
- Offer a brief description and a member of the Hirsch Security Reporting team will contact you for further details. If the report is submitted anonymously, please include steps to reproduce.
- Be in English, if possible.
What you can expect from us
When you choose to share your contact information with us, we commit to coordinating with you as openly and as quickly as possible.
- Within 3 business days, we will acknowledge that your report has been received.
- To the best of our ability, we will confirm the existence of the vulnerability to you and be as transparent as possible about what steps we are taking during the remediation process, including on issues or challenges that may delay resolution.
- We will maintain an open dialogue to discuss issues.
Questions
Questions regarding this policy may be sent to securityVDP@hirschsecure.com. We also invite you to contact us with suggestions for improving this policy.