Security

At BRAGER we treat the security of our products as a top priority. In line with the Cyber Resilience Act (CRA), we run a transparent vulnerability management policy.

Security documents

Security policy for products with digital elements 01_Polityka_bezpieczenstwa_produktow_z_elementami_cyfrowymi_wg_CRA_BRAGER.pdf

Download PDF
Coordinated vulnerability disclosure policy (CVD) 02_Polityka_ujawniania_podatnosci_CVD_BRAGER.pdf

Download PDF
Reporting API documentation (OpenAPI) openapi-public-cra.yaml

Download YAML

If you want to report vulnerabilities through our API, write to security@brager.com.pl to obtain your own token.

Report a vulnerability (CVD)

Found a flaw in one of our products?

Describe it in the form below - your report goes straight into our vulnerability register and we will handle it under our CVD policy. Anonymous reports are welcome; contact details are optional, but without them we cannot come back to you with the outcome.

Prefer e-mail? Write to:

security@brager.com.pl

Report

Describe what you found. This is the most important part.

Report type *

Title * Keep it short, e.g. “Buffer overflow in the Wi-Fi module”.

Description * What happens, how to reproduce it and what the impact is. If you are reporting a known, already published vulnerability in a component (a library, for instance), give its CVE number here. The more specific you are, the faster we can assess it.

I have indications that the vulnerability is being actively exploited