Product Security
Vulnerability Disclosure Program
Lysora PSIRT accepts private product vulnerability reports and tracks validation, remediation, and coordinated disclosure.
Safe Harbor
We respect good-faith security research performed under the approved policy. Binding Safe Harbor terms appear only in the legal-approved policy text.
Privacy
Reports, attachments, and reporter identity are confidential PSIRT data and are excluded from public CMS snapshots and search indexes.
Coordinated disclosure
We coordinate validation, remediation, and affected-customer communications before public disclosure. You may provide a preferred disclosure date with your report.
Target remediation times
Acknowledgement within 24 hours
| CVSS 3.1 rating | CVSS | Temporary mitigation | Formal resolution |
|---|---|---|---|
| CRITICAL | 9.0-10.0 | Within 7 business days | Within 30 business days |
| HIGH | 7.0-8.9 | Within 7 business days | Within 30 business days |
| MEDIUM | 4.0-6.9 | Within 14 business days | Within 60 business days |
| LOW | 0.1-3.9 | Within 30 business days | Within 180 business days |