Responsible Vulnerability Disclosure & Security Reporting
A secure and coordinated process for reporting cybersecurity vulnerabilities & severe incidents affecting Foxguard products & services.
Supporting security researchers, customers, and partners through coordinated vulnerability disclosure
Product Vulnerability & Security Incident Reporting
Submit cybersecurity vulnerability reports affecting Foxguard products, Foxguard portals, or SFTP transfer mechanisms.
Disclosure Policy
Review Foxguard’s Responsible Vulnerability Disclosure Policy, testing expectations, researcher protections, and disclosure process.
Foxguard’s security reporting contacts:
David Bland – Foxguard Security Officer
Report a Vulnerability or Security Incident
Scope Section
IN-SCOPE SYSTEMS
- Foxguard products
- Foxguard Portal
- SFTP Transfer mechanisms
OUT-OF-SCOPE SYSTEMS
- Third-party services
- Customer-managed environments
- Denial-of-service testing
- Physical security testing
Any service not expressly listed above, such as any connected services, are excluded from scope and are not authorized for testing. Additionally, vulnerabilities found in systems from our vendors fall outside of this policy’s scope and should be reported directly to the vendor according to their disclosure policy (if any).
If you aren’t sure whether a system is in scope or not, contact us at Disclosure@foxguardsolutions.com before starting your research.
Disclosure Process
Foxguard maintains a coordinated vulnerability disclosure process for products with digital elements. Vulnerability reports are evaluated and managed through Foxguard’s vulnerability management process. Where applicable legal requirements exist, including the European Union Cyber Resilience Act (EU) 2024/2847, Foxguard will report actively exploited vulnerabilities and severe incidents to applicable authorities and provide customer notifications as required.
Privacy rights for all reports follow the Foxguard Privacy Policy