Product Security (CRA)

Fill Gesellschaft m.b.H. takes the security of your machines, systems, software solutions, and digital services very seriously. We welcome reports from customers, partners, security researchers, and other responsible individuals who report potential security vulnerabilities.

Reporting a Security Vulnerability

If you have discovered a potential vulnerability, please notify our Product Security Incident Response Team (PSIRT) by email: psirt@fill.co.at

If possible, please provide the following information:

• Description of the vulnerability
• Affected machine, system, or software
• Version
• Steps to reproduce the issue
• Potential impact
• Contact Information for Inquiries

Our Approach to Reports

All incoming reports are reviewed by Fill and processed in accordance with our vulnerability management process. Fill supports coordinated disclosure of vulnerabilities and works constructively with reporters on valid reports. If necessary, affected customers will be informed through appropriate communication channels.

Responsible Disclosure

We ask that you

• report vulnerabilities confidentially,
• not to modify or disclose any customer or third-party data,
• not to interfere with the operation of equipment and systems,
• and to comply with applicable laws and regulations.

Thank you for your support in continuously improving the security of our products and solutions.