Cybersecurity vulnerability reporting
Report vulnerabilities or security incidents affecting Joifilabs products, in line with the EU Cyber Resilience Act (Regulation (EU) 2024/2847).
Our coordinated disclosure policy
We acknowledge every report within 5 business days and keep you informed during analysis and remediation.
Actively exploited vulnerabilities and severe incidents are notified to ENISA and the national CSIRT within 24 hours (early warning) and 72 hours (notification), as required by the CRA.
Security updates are provided free of charge during the support period of the product, and fixed vulnerabilities are disclosed publicly once a fix is available.
Please do not disclose the issue publicly until we have agreed a coordinated disclosure date.
Single point of contact: security@joifilabs.com