Our speed controllers, power electronics and other products with firmware fly in aircraft and robots. We take reports of security weaknesses in them, and in our website and systems, seriously, and we welcome the help of researchers, customers and partners who find them.

In scope.

• firmware and software for Vector Technics products, including electronic speed controllers, power distribution boards and other power electronics;
• configuration and update tools we publish;
• www.vectortechnics.com and other systems operated by Vector Technics.

Out of scope. Denial-of-service testing, social engineering or phishing of our staff, physical attacks on our premises, and systems of our customers, suppliers, distributors or service providers.

Email support@vectortechnics.com with the subject "Security Report". Include the product and firmware version or the web address affected, a description of the issue and its impact, the steps to reproduce it, and any proof of concept. Please do not include personal data you obtained during testing. Reports sent to legal@vectortechnics.com are also accepted.

1. We acknowledge your report within five business days.
2. We assess it, confirm whether it is valid and how severe it is, and keep you informed.
3. We develop and release a fix or mitigation, and tell affected customers how to apply it.
4. With your agreement, we credit you when we disclose the issue.

We ask that you give us 90 days from your report before disclosing the issue publicly, unless we agree a different date with you, for example because the issue is being actively exploited. We do not currently offer payment for reports.

If you act in good faith, report promptly, test only to the extent needed to show the issue, do not access, change or keep data that is not yours, do not disrupt our services or anyone's aircraft or systems, and follow this page, we will not take legal action against you for that research. This does not authorise testing of systems that belong to anyone else. Our Website Terms of Use say the same for our website.

Some of our firmware is based on open-source software. Where an open-source licence requires it, we provide the corresponding source code on request, as set out in our General Terms and Conditions of Sale.

Security reports. support@vectortechnics.com, subject "Security Report"