Report Vulnerability
Have you found a potential security vulnerability in a Padtec product?
Security Vulnerability Reporting
Padtec values the collaboration of customers, partners, security researchers, and other stakeholders in identifying potential vulnerabilities in its products and solutions.
If you identify a suspected security vulnerability related to a Padtec product, please submit the information through the channel indicated on this page.
Reports received will be recorded, analyzed, and forwarded to the responsible technical teams in accordance with Padtec’s vulnerability management process.
How to report a vulnerability
To submit a report:
- Click to download the Vulnerability Reporting Form
- Complete the requested information in as much detail as possible
- Send the completed form and any available evidence to the following email address:
prv@padtec.com.br (Padtec – Vulnerability Report)
Required information
To enable a proper analysis, the report should include, whenever possible:
- name and contact details of the person reporting
- company or organization, if applicable
- affected product and model
- hardware, firmware, and software versions
- description of the potential vulnerability
- steps to reproduce the issue
- observed or potential impact
- environment in which the issue was identified
- logs, screenshots, configuration files, or other evidence
- information about any prior disclosure of the vulnerability
Missing information will not prevent the report from being received, but it may increase the time required for analysis.
Confidentiality of information
In this initial version of the portal, Padtec does not provide a PGP encryption mechanism for submitting information.
We recommend that the person reporting:
- not send passwords, credentials, or private keys
- not include unnecessary personal data or customer information
- remove sensitive data from logs and configuration files
- not send classified or confidential information
- initially provide only what is needed for triage if the material is highly sensitive
If sensitive files need to be transferred, Padtec may arrange an alternative sharing method after the initial contact.
Coordinated disclosure
Padtec requests that information related to the potential vulnerability be kept confidential during the investigation and remediation period.
The person reporting should avoid publicly disclosing the vulnerability until:
- the technical investigation has been completed
- a fix or mitigation measure has been made available, if applicable
- potentially affected customers have had adequate time to take the recommended actions
- the method and date of disclosure have been coordinated with Padtec
Out-of-scope situations
This channel should not be used for:
- questions about installation or configuration
- routine technical support requests
- operational failures with no indication of a security impact
- firmware update requests
- maintenance service requests
- commercial issues
- general availability incidents with no evidence of an attack or vulnerability
In these situations, customers should use Padtec’s regular NOC, Customer Service, or Technical Support channels.
Padtec’s commitment
Padtec commits to:
- recording reports received
- conducting an initial review of the information
- referring the case to the responsible teams
- communicating with the person reporting when necessary
- assessing corrective or mitigation measures
- notifying affected customers when applicable
- publishing security guidance or advisories when necessary
- protecting the information received by limiting access to those involved in handling the report