Report a Security Vulnerability

Found a potential security issue in one of our products or services? Tell us. We handle every report through our coordinated vulnerability disclosure process, in line with the EU Cyber Resilience Act (Regulation (EU) 2024/2847).

"*" indicates required fields

Phone

This field is for validation purposes and should be left unchanged.

Please do not include real customer data, passwords or live credentials in this form. For sensitive technical details (e.g. proof-of-concept exploits, logs or screenshots), please encrypt them with our PGP key and upload the encrypted file at the end of section 3, or email it to security@sensile.com, quoting your report summary.

1. About you

First name*

Last name*

Email*

Phone

Company / organisation

You are reporting as*

Country*

2. Affected product

Product / service*

Model / firmware / software version

Found on the device label or in the app's "About" page.

Serial number(s) or instance URL

3. Vulnerability details

Type of issue*

Your severity estimate

Optional. A CVSS vector can be added in the description.

Short summary*

Description & impact*

Steps to reproduce

Known references (CVE, advisory, affected component)

Do you believe this vulnerability is actively exploited?*

Yes - I have evidence

Suspected

No / not aware

Thank you – reports of actively exploited vulnerabilities are escalated immediately. Under the CRA, we notify the competent CSIRT and ENISA with an early warning within 24 hours of becoming aware. Please include any indicators of compromise in the description.

Encrypted attachments (optional)

Drop files here or

Accepted file types: asc, gpg, pgp, Max. file size: 10 MB, Max. files: 5.

Only PGP-encrypted files (.asc, .gpg, .pgp), max. 10 MB each. Please encrypt with our PGP key before uploading.

4. Disclosure preferences

Public disclosure

Name for public acknowledgement

Your PGP key or fingerprint (for encrypted replies)

5. Consent

Good-faith statement*

I confirm I acted in good faith, did not access or modify data beyond what was necessary to demonstrate the issue, and will keep details confidential until coordinated disclosure.

Product Security Team

Prefer email? Contact us directly:

Email: security@sensile.com
PGP key: Download
Fingerprint:
1A36 7309 0DE1 9CD7 934E FFAB DFEE D417 1E68 27C7
security.txt: /.well-known/security.txt

Sensile Technologies SA
Rue de Lausanne 45
CH-1110 Morges
Switzerland

For general or sales questions, please use our regular contact page. For device support, contact your local distributor.

What happens next

Acknowledgementwithin 2 business days
Initial assessmentwithin 10 business days, incl. severity rating
Remediationfix or mitigation developed; regular status updates to you
Security advisorypublished once a fix is available, with credit if desired

Actively exploited vulnerabilities and severe incidents are reported to the CSIRT/ENISA within 24 h (early warning), 72 h (notification) and 14 days (final report), as required by CRA Article 14.

Scope

Sensile hardware & firmware
Web platform, mobile apps and APIs
Third-party components shipped in our products

Please do not perform tests that could disrupt service to customers (DoS, social engineering, physical attacks).

Report a Security Vulnerability

1. About you

2. Affected product

3. Vulnerability details

4. Disclosure preferences

5. Consent

Product Security Team

What happens next

Scope

Rue de Lausanne 45CH-1110 Morges, Switzerland+ 41 21 805 0310

Quick links