Invisible-Light Labs PSIRT
The Invisible-Light Labs Product Security Incident Response Team (PSIRT) is responsible for managing cybersecurity issues affecting Invisible-Light Labs products. This includes receiving and assessing vulnerability reports, identifying and remediating cybersecurity vulnerabilities, and coordinating their responsible disclosure.
If you believe you have found a cybersecurity weakness in any of our products, this page tells you how to reach the PSIRT, what to put in a report, and what we commit to in return.
How to report
Vulnerability reports should be submitted via the official email address provided below. We accept reports from anyone — customers, partners, independent security researchers and members of the public. For secure communication, reports can be encrypted using our PGP key.
Cybersecurity team contact
- security@invisible-light-labs.com
- PGP Key
- pgp-key.txt ·
6044 29A1 5ED1 F625 9859 D06F 98B6 ECDC 8414 697E - Languages
- German, English
Please do not make the issue public until it is fixed. While no update, upgrade or workaround exists, published detail may give attackers sufficient information to exploit the vulnerability. Once an effective mitigation is available, the relevant details will be published on our security advisory page.
What to submit
To help us assess and address a reported vulnerability efficiently, please provide the following information where available.
Product and version
The affected product and its firmware or software version.
What the issue is
A description of the weakness and what it allows someone to do.
How to reproduce it
Step-by-step instructions, a proof-of-concept, or captures.
What happens next
Every report is registered, answered and closed in a traceable way — including reports that turn out to be outside our scope.
-
Confirm
We reproduce the reported issue, identify the affected products and versions, and assess its severity and impact.
-
Remediate
We develop and test a security update to address the vulnerability. If a fix cannot be released immediately, we provide a workaround where possible.
-
Disclose
Once a fix, upgrade or workaround is available, we publish a security advisory with the relevant details. The reporter can be credited upon request.
Serious Security Incidents
Where we become aware of an actively exploited vulnerability in one of our products, or a severe security incident affecting the security of our products, we notify the competent authorities via the ENISA Single Reporting Platform within the statutory deadlines and inform affected users without undue delay.