CROSSCALL DISCLOSURE POLICY

The safety of our customers is one of CROSSCALL top priorities. It guides us through every stage of our product development process. Even after our products are released, we do everything we can to respond quickly to any potential security flaws or vulnerabilities in our products.

CROSSCALL to the principles of responsible vulnerability disclosure and encourages you to report any security vulnerabilities you have discovered in good faith using the reporting form.

Create a report

To assist you in this process, CROSSCALL established this vulnerability disclosure policy. CROSSCALL on the vulnerability handling process, from the time CROSSCALL receives a report CROSSCALL CROSSCALL publishes verified and fixed CROSSCALL .

CROSSCALL Commitments

Responsible disclosure of security vulnerabilities helps ensure customer safety.
CROSSCALL carefullyCROSSCALL every report it receives and is committed to addressing potential security vulnerabilities as quickly as possible.

Process each form carefully and inform you that it has been received within 7 calendar days;
Work with the reporter to understand the vulnerability;
Implement the necessary actions to quickly resolve the potential vulnerability
;
Distribute patches to consumers as quickly as possible, depending on the vulnerability being addressed. This information will be provided to you as part of our communications.
Publish resolved vulnerabilities

Declarant's commitments

Comply with all applicable laws in the context of your IT security research activities;
Please use theformto report potential vulnerabilities as thoroughly as possible and provide sufficient information so that CROSSCALL reproduce the vulnerability and resolve it quickly;
As soon as a vulnerability is discovered, please maintain confidentiality regarding this security breach while the patch is being deployed on our equipment, in particular to avoid any personal data breaches, deterioration of the user experience, server disruption, or destruction of any data.
Do not disclose the reported vulnerability during the CROSSCALL processing period CROSSCALL 90 days)
Refrain from using the reported vulnerability for offensive, commercial, or professional purposes.

It should be noted that the discovery of a vulnerability does not in any way imply any intellectual property rights or claims on Crosscall software or products.

If you would like to contact CROSSCALL questions about your products, technical support, or an after-sales service issue, please use the appropriate form.