Product cybersecurity at Telemecanique Sensors
At Telemecanique Sensors, we build and maintain our products with security in mind across the full product life cycle, from design and implementation to testing and vulnerability management. We treat vulnerability discovery as a shared effort with the security community, with one goal: keeping our customers protected throughout the time our products are in service.
Our product security program is designed to support applicable cybersecurity regulation, including the EU Cyber Resilience Act (CRA), by embedding security activities across our secure development lifecycle and by maintaining an organised vulnerability handling and disclosure capability throughout the product support period.
Report a vulnerability
If you believe you have found a security issue affecting a Telemecanique Sensors product or a related service, please report it to:
We welcome reports from anyone, regardless of customer status, including independent researchers, universities, CERT/CSIRT teams, partners, suppliers, and authorities.
To help us investigate quickly, include as much detail as possible, for example:
- Affected product, model/reference and firmware/software version
- Clear description of the issue and impact
- Steps to reproduce, proof-of-concept details, and logs/screenshots where relevant
- Any known workaround or mitigation
- Your preferred contact details, availability, and disclosure intentions (if you have a timeline)
Coordinated vulnerability disclosure
We aim to work confidentially and professionally with reporters, and we ask that vulnerability details are not disclosed prematurely while we validate and remediate.
What you can expect from us
Our vulnerability handling follows a structured approach: report intake, analysis, resolution, and coordinated disclosure.
We acknowledge and assess reports, then coordinate internally with the responsible engineering teams.
When a vulnerability is confirmed, we develop and test fixes or mitigations, and we communicate progress with the reporter.
We publish a security advisory when a solution is available, and if needed we can publish interim guidance earlier (for example, mitigations) to help customers reduce risk.
Customer notification
When a confirmed vulnerability affects our products, we will inform customers through our security advisory channels and provide clear remediation or mitigation guidance.
Back to top
