Security
Report a security vulnerability
Charco Neurotech welcomes reports of suspected security vulnerabilities in our products, our mobile application and our website. If you believe you have found one, please tell us using the form on this page or by email to [email protected].
What to include
Please give us as much of the following as you can.
- The product, application or website affected, and the version if you know it
- What you observed and why you believe it is a security issue
- The steps needed to reproduce it
- Any proof of concept material, screenshots or logs
- How you would like us to contact you
Please do not include patient information or health data in your report.
What happens next
- We acknowledge receipt within 5 business days
- We will make an initial assessment within 30 days of receiving your report
- We keep you informed of progress until the report is closed, and we tell you the outcome
- Where a fix is issued, we will tell you when it becomes available
You can use a pseudonym and an email address set up for the purpose. If you report without a working email address, we won’t be able to send you updates.
"*" indicates required fields
Read our privacy policy to find out how we use the information you send us.
Reporting in good faith
If you report a suspected vulnerability to us in good faith, give us a reasonable opportunity to investigate and resolve it before disclosing it publicly, and do not access, modify or delete data belonging to other people, we will not pursue action against you in relation to your research.
If you test our products
Please only test devices and accounts that you own or have permission to use. Do not access, change or keep other people’s data, and do not disrupt our services. If you reach personal data, stop and tell us. Please give us reasonable time to fix an issue before sharing details publicly.
Please do not
- Access, modify or delete data belonging to other users
- Degrade or interrupt our services for others
- Disclose the issue publicly before we have had a reasonable opportunity to respond
This page is not for clinical or safety concerns. If you are experiencing a problem with your device that affects your health or safety, please contact [email protected] or your healthcare professional.
Security notices and support
Charco Neurotech publishes notices about security issues that affect users of our products. Each notice gives the affected versions and what action you need to take.
We also provide security updates for the CUE1+ and the CUE App for the expected service life of the device. If security support ends, we will announce it on this page, at which point the device may be exposed to new security risks.
No security notices have been published yet.