Coordinated Vulnerability Disclosure Process, CVD Coordinated Vulnerability Disclosure Process

The quality of industrial marking and traceability is FOBA’s highest priority. By developing precise, reliable, and user-friendly laser marking systems, combined with extensive expertise and comprehensive support, FOBA helps ensure consistently high quality standards across a wide range of industries. To meet this commitment, we consistently align our actions with our core values and take responsibility toward our customers. An essential part of this responsibility is our ongoing commitment to the security of our solutions.

As data protection and cybersecurity requirements continue to evolve, we are continuously working to further improve our systems and processes. To protect against potential cyber threats, FOBA implements structured product security measures. Security vulnerabilities are systematically assessed and addressed through coordinated processes. Feedback from customers and security researchers plays an important role in this effort, enabling us to continuously learn, strengthen our security standards, and enhance the protection of our solutions.

Scope

This Coordinated Vulnerability Disclosure (CVD) process applies to the reporting of potential cybersecurity vulnerabilities affecting FOBA products and services.

If you require support, technical documentation, regulatory contacts, or notifications, please contact our support team.

Contact Information and CVD Submission Process

Potential security vulnerabilities or data privacy issues related to a FOBA product should be reported via our contact form.
We kindly ask that you do not include any confidential information in your submissions to FOBA. Please provide the following information when submitting a report:

Your contact information (e.g., name, address, phone number, and email address)
Date and method of discovery
Description of the potential vulnerability
Product name
Version number
Configuration details
Steps to reproduce the issue
Tools and methods used
Log files
Exploit code
Required privileges or permissions
Results or potential impact

Next Steps

After we receive a submission regarding a potential product security vulnerability, we will:

Acknowledge receipt of the submission promptly, typically within five (5) business days
Assess and validate the reported findings in collaboration with specialized product teams
Contact the submitter if additional information is required
Take appropriate corrective action as necessary

Disclaimer

Protecting the security and personal data of our customers is our highest priority.

If you test the security of our products, please ensure that your activities do not cause harm to yourself, other customers, or the products. Please note that security testing may adversely affect a product's functionality. Therefore, no security testing should be conducted on active products operating in a production environment. In addition, products that have undergone security testing should not subsequently be used in a production environment. If in doubt, please contact a FOBA representative.

FOBA reserves the right to modify its Coordinated Vulnerability Disclosure (CVD) process at any time without prior notice and to make exceptions on a case-by-case basis. No guarantee is made regarding the implementation of any specific security measures. However, if a reported vulnerability is verified, we will, where appropriate, acknowledge the responsible reporter.

IMPORTANT: Do not submit confidential information to FOBA as part of your report. Please ensure that all testing activities comply with applicable laws and regulations.

By contacting FOBA, you agree that the information you provide is subject to our website’s Privacy Policy and Terms of Use.

Note: By submitting information to FOBA, you agree that the information provided will be considered non-confidential and non-proprietary, and that FOBA may use such information, in whole or in part, without restriction and for any purpose.