We value the collaboration with our customers and the security research community. If you believe you have identified a potential security vulnerability in one of our products, we welcome the information and want to know so we can investigate.
If you think you have discovered a potential security vulnerability in a Sentec product, please contact us using the linked form. In your report, please submit information and detailed instructions which will enable our security team to recreate the problem.
Sentec will not engage in legal action against individuals who in good faith submit vulnerability reports in accordance with our coordinated vulnerability disclosure process. We openly accept reports for the currently supported products from individuals who:
Engage in testing our products without harming Sentec or its customers
Engage in vulnerability testing within the scope of our vulnerability disclosure program and avoid testing against products and/or services being actively used for patient care, or monitoring and testing is done in a safe manner with the following considerations:
Testing is conducted in a manner to avoid potential harm to patients and as a result testing should not be conducted in a clinical setting while monitoring patients.
If testing is conducted and products have been manipulated or subjected to vulnerability testing, these may have been negatively affected and consequently such products should not subsequently be used in a clinical application.
Protecting personal information is paramount and therefore, when conducting security research, please avoid actions that could cause disclosure of Personal Health Information (PHI).
Sentec reserves the right to modify its coordinated vulnerability disclosure process/ policy at any time, without notice, and to make exceptions to it on a case-by-case basis. Sentec does not guarantee a particular level of response.
CAUTION: Do not include sensitive information (e.g., sample information, PHI, PII, etc.) in any documents submitted to Sentec. Comply with all laws and regulations in the course of your testing activities.
By contacting Sentec, you agree that the information you provide will be governed by our site’s Privacy Policy. When sharing any information with Sentec, you agree that the information you submit will be considered non-proprietary and non-confidential and that Sentec is allowed to use such information in any manner, in whole or in part, without any restriction.
