Cybersecurity.
Responsible disclosure of security vulnerabilities.
At Riedel Kooling, the security of our products, systems, and digital services is a high priority. Reports of potential vulnerabilities help us continuously improve our products, applications, digital services, and IT infrastructure while strengthening cybersecurity across our organisation.
We support the principles of Coordinated Vulnerability Disclosure (CVD) and encourage constructive collaboration with security researchers, customers, partners, and other responsible parties who identify potential security issues.
Our approach to responsible vulnerability disclosure is based on the principles of the Responsible Vulnerability Policy of the Glen Dimplex Group.
Report a security vulnerability.
If you have identified a potential security vulnerability, we encourage you to report it to us as soon as possible. To support efficient analysis and remediation, please provide the following information whenever possible:
- Affected product, system, or service
- Description of the vulnerability
- Potential impact
- Steps required to reproduce the issue
- Supporting evidence such as screenshots, log files, or proof-of-concept material
- Contact information for follow-up questions (optional)
The more detailed and accurate the information provided, the faster we can assess and address the reported issue.
Contact options.
Product Security Incident Response Team (PSIRT)
For vulnerabilities affecting Riedel Kooling products, software or digital services:
psirt@riedel-kooling.comCyber Security Incident Response Team (CSIRT)
For vulnerabilities affecting Riedel Kooling corporate IT systems and infrastructure:
csirt@riedel-kooling.comOnline reporting form.
Alternatively, security vulnerabilities can be submitted through our online reporting form. Please note that without a contact option, we may be unable to request additional information, which can limit our ability to investigate and resolve the reported issue.
Report a Vulnerability
Our commitment.
Committed to security, transparency & trust.
We are committed to:
- Reviewing every report carefully
- Treating all information confidentially
- Communicating transparently throughout the process
- Following the principles of Coordinated Vulnerability Disclosure (CVD)
- Protecting personal data and respecting responsible security research
FAQ.
We recommend providing a contact method when reporting a security vulnerability so that we can request additional information if necessary and keep you informed about the progress of the investigation.
If you prefer not to provide any personal information, we will only process the information you voluntarily submit. Please note that investigating such reports may be more challenging if additional technical information or clarification is required.
Information can be submitted to us using the contact channels specified in the policy. Electronic communication is protected by established technical security measures designed to safeguard data transmission. If you have specific confidentiality requirements, please contact us so that we can jointly agree on an appropriate method of transmission.
We aim to provide a personal acknowledgement of receipt within five business days and an initial assessment or qualified feedback within ten business days.
Our feedback may include confirmation of the reported vulnerability, requests for additional information, or an update on the status of our investigation.
We welcome reports relating to vulnerabilities that affect:
- Riedel Kooling products
- Digital services provided by Riedel Kooling
- Riedel Kooling IT infrastructure
- The confidentiality, integrity, availability, or authenticity of our systems and services
To help us investigate efficiently, reports should include sufficient technical information and, where possible, relate to previously undisclosed vulnerabilities.
To support efficient investigation and remediation, we recommend including:
- the affected product, system, service or website
- a description of the vulnerability
- the potential impact
- steps required to reproduce the issue
- supporting evidence such as screenshots, log files or proof-of-concept material
The more detailed the information provided, the faster the reported vulnerability can be assessed and addressed.
We ask all reporting parties to act responsibly and in good faith.
When conducting security research, please:
- Avoid disrupting our services or business operations
- Do not access, modify, delete, or disclose data that is not your own
- Refrain from social engineering, denial-of-service, brute-force, or similar attacks
- Keep discovered vulnerabilities confidential until remediation and coordinated disclosure have been completed
- Communicate respectfully and professionally throughout the process
We appreciate responsible disclosure and welcome constructive collaboration that helps us improve the security of our products and services.
Confirmed vulnerabilities are assessed, prioritized, and addressed through our vulnerability management process.
Where appropriate, Riedel Kooling will provide corrective actions, software updates, mitigation measures, or security advisories. We may also inform affected customers, partners, and other relevant stakeholders.
Any public disclosure of confirmed vulnerabilities will be coordinated in accordance with responsible vulnerability disclosure practices to ensure customer protection and system security.
Privacy notice.
Personal data provided through a vulnerability report will be processed solely for the purpose of investigating, managing, and resolving the reported security issue.
For further information, please refer to our Privacy Policy.