At Kontrol, we take the security of our products and the privacy of our users very seriously. We encourage responsible disclosure of any vulnerabilities that may exist in our devices or services. This policy is intended to provide clear guidelines for reporting vulnerabilities and outline our commitment to resolving them.

Contact information for reporting issues

To report a vulnerability, please contact us at security@homekontrol.net. We commit to acknowledge receipt of your report within 24 to 72 hours and provide regular status updates during the resolution process.

Timeline for resolution

Initial confirmation: We will acknowledge receipt of your report within 24 to 72 hours.
Status Updates: Reporters can expect updates on the progress of the fix at least every two weeks.
Resolution: We aim to resolve all reported issues within 90 days of initial reporting, depending on the complexity of the issue.

Encouraging responsible disclosure

We ask that researchers not publicly disclose the details of any vulnerabilities without coordinating with us. This allows us to ensure the security and privacy of our users by resolving the issue before it is disclosed to the public.

Recognition for donors

Kontrol appreciates the efforts of those who contribute to our security by responsibly disclosing vulnerabilities. We are committed to acknowledging the contributions of security researchers in our social media statuses or on our website at https://shop.homekontrol.net/policies/privacy-policy.

For more details, visit our dedicated security page at https://shop.homekontrol.net/policies/privacy-policy.