Coordinated Vulnerability Disclosure Policy
Report a security vulnerability
The security of our products and connected systems is a top priority for Solavita. If you have discovered a potential security vulnerability in a Solavita product, software, firmware or connected service, please report it to us as soon as possible.
Prefer to send the report by email? security@solavita.com
Or call our international hot number: 400 900 9016
WHO CAN REPORT A VULNERABILITY?
We accept reports from different user groups.
Whether you use, install, distribute or research our products — if you spot a potential security issue, you can pass it on to us through this reporting channel.
Customers & end users
Report security issues you notice while using a Solavita product or service.
Installation & service partners
Help us detect potential security issues early during installation, commissioning and operation of connected energy systems.
Distribution partners
Report potential security issues you observe in connection with our products.
Security researchers
Responsible reports from security researchers help us detect weaknesses early and further protect our products.
REPORT A VULNERABILITY
Describe the security issue
Please provide as accurate and relevant information as possible. The more detail you give, the better we can investigate and assess the issue.
SECURITY CONTACT
Report by email
If you do not want to use the online form, you can report a potential vulnerability directly to our security team.
Where possible, please include the affected product, the relevant software or firmware version, and a deion of the issue.
Responsible reporting
We welcome responsible vulnerability reports.
Please give us enough time to investigate a reported vulnerability and take appropriate action before publicly disclosing information that could put our customers, products or connected services at risk.
Please do not submit unnecessary personal or confidential information.
OUR PROCESS
What happens after your report?
01 — We receive your report
Your report is received and documented by our responsible security team.
02 — We assess the vulnerability
We review the information provided and assess the potential significance and impact of the vulnerability.
03 — We investigate the issue
Our security and product teams investigate the matter. If needed, we contact you for further information.
04 — We take appropriate action
If a vulnerability is confirmed, we take appropriate measures to fix or contain the issue and, where required, provide security updates or other remediation.
REGULATORY INFORMATION
Cyber Resilience Act
This reporting channel is part of Solavita's product security and vulnerability management.
Where applicable, Solavita handles vulnerabilities in accordance with Regulation (EU) 2024/2847 (Cyber Resilience Act) and the applicable cybersecurity requirements.
This channel is for reporting vulnerabilities to Solavita. It is not the statutory reporting platform of the European Union.