Reporting Security Vulnerabilities and Incidents

How to Report a Security Vulnerability or Security Incident
Syslogic recognizes the importance of information security in maintaining trust and integrity in our operations. Protecting sensitive data and ensuring the security of our systems are foundational to our business and our relationships with customers, suppliers, partners, and other stakeholders. By promptly addressing security incidents, we aim to prevent data breaches, maintain trust, and ensure compliance with regulatory requirements and industry standards for data protection and cybersecurity.

We seek the same level of commitment to security and prompt response from our stakeholders that we expect of ourselves. Whether you are a customer, supplier, partner, employee, or member of the general public, your prompt reporting is essential to mitigating the impact of security incidents and preventing further damage. By working together, we can ensure the integrity of our shared information and collaborative processes, address security incidents effectively, and strengthen our mutual security protocols.

This applies both to security incidents affecting our organization (e.g., data breaches and system compromises) and to vulnerabilities identified in Syslogic products. We are committed to handling vulnerability reports in line with the principles of coordinated disclosure and will work with you to assess, address, and resolve reported issues in a responsible and timely manner.

If you identify a security incident or product vulnerability, please report it via email to infosec@syslogic.com.

To facilitate an effective investigation and resolution, please provide as much of the following information as possible when reporting an incident:

• Your contact information
• A clear and detailed description of the incident and how it was discovered
• The date and time the incident occurred
• Any available log files
• The Syslogic products, systems, or data potentially affected
• Any publicly available information related to the incident
• Any public information that has already been published or is planned for publication (e.g., an incident alert issued by your company)

‍

All information you provide will be treated as confidential and used solely for the purpose of investigating and resolving the reported incident.