Product Security · PSIRT
We safeguard the availability, integrity and security of our machines and digital solutions throughout their entire lifecycle. If you discover a vulnerability, please report it to us responsibly.
Co-ordinated dissemination channel · Confidential · PGP encryption available
Product cybersecurity
Vulnerability management is part of our process for designing, developing, maintaining and updating products that incorporate digital elements.
A process in line with Regulation (EU) 2024/2847.
Coordination team for reception, analysis and remediation.
Coordinated disclosure to protect the client prior to publication.
Our commitment
We want any researcher, client or partner to be able to report a finding clearly, securely and with a predictable response process.
We treat your work with seriousness and respect. Every report receives the attention it deserves, with no automated replies or unjustified rejections.
We believe in responsible research. Our policy safeguards good faith and precludes legal action against researchers who act within the authorised scope and comply with this policy.
Every report is treated with the utmost confidentiality. The investigator’s details and technical information are kept secure throughout the analysis and coordination process.
We value your time and your opinion. We maintain clear communication throughout the validation, remediation and disclosure processes, whilst respecting your preferences regarding public acknowledgement.
How it works
Please provide your contact details and, where applicable, the organisation you belong to, so that we can coordinate the analysis and response.
Please identify the machine, product or system affected, its manufacturer and the specific version of the software or firmware.
Give the finding a title, select the relevant CWE category and provide any CVE/CWE references if they already exist.
Describe the vulnerability, the steps required to reproduce it, its impact, and provide a proof-of-concept (PoC), commands, code, logs or supporting files.
Check all the information, accept the Vulnerability Disclosure Policy and confirm secure submission to the PSIRT.
Responsible disclosure
Avoid tests that could compromise people, production, third-party data or the availability of a machine.
For particularly sensitive information, encrypted transmission using a public PGP key can be enabled.
PSIRT Channel
Please complete each step. Required fields are checked before you can proceed.
Monitoring
Secure recording of the case and confirmation to the investigator.
Reproduction, technical classification and impact assessment.
Correction, mitigation, testing and preparation for the update.
Co-ordinated communication with clients and the investigator where appropriate.
FAQs
CNC, Panel PCs, IPCs, software or digital services, cameras and other digital components supplied or integrated into Nicolás Correa machines.
The channel can be adapted to accept reports containing minimal data. For this proposal, a contact email address is required to facilitate the validation and coordination of the finding.
The obligations to report actively exploited vulnerabilities and serious incidents come into force on 11 September 2026.
No. This channel is exclusively for cybersecurity vulnerabilities in digital products and services.
