Eriez Vulnerability Disclosure Policy

At Eriez Manufacturing, we are committed to maintaining the security of our products, systems and IT infrastructure. We have established this Vulnerability Disclosure Policy to provide a clear process for reporting potential security vulnerabilities and to help protect our customers and users.
If you believe you have identified a security vulnerability involving an Eriez Manufacturing product, system or service, we encourage you to report it using the process outlined below.
 

Reporting a Vulnerability

• Please email PSIRT@eriez.com with as much relevant information as possible, including the affected product or system, steps to reproduce the issue, potential impact and any supporting details.

Responsible Disclosure

• Eriez Manufacturing will review reported vulnerabilities in a timely and confidential manner and will work toward an appropriate resolution. 
• We ask security researchers and other individuals reporting vulnerabilities to act responsibly and avoid activities that could harm Eriez, our products, our systems or our customers. 
• Please do not publicly disclose details of a reported vulnerability until Eriez has had a reasonable opportunity to investigate and address the issue. 

Disclosure

• Once a vulnerability has been addressed, Eriez may provide recognition to the individual or organisation that responsibly reported the issue, where appropriate. 

Thank you for helping Eriez Manufacturing protect the security and integrity of our products and services. Responsible security research and reporting help us improve our products and better protect our customers.

For questions or additional information, please contact PSIRT@eriez.com or visit Eriez.com.