Contact
Global Website
Choose your location
Choose your language
Close-up of a person wearing glasses in front of a computer screen. Digital data and technical interfaces are reflected in the lenses.

Report vulnerabilities

Coordinated vulnerability disclosure

Coordinated vulnerability disclosure (CVD)

The security of our products is a top priority for us. If you discover a potential vulnerability in a WAGNER Group GmbH product, please report it to us confidentially so that we can investigate and resolve it before details become public.

This page describes how to contact us and how we handle your report.

1. Scope

This policy applies to vulnerabilities in products with digital components that are placed on the market by WAGNER Group GmbH as the manufacturer, including the associated software.

For general technical questions regarding the cybersecurity of our products and for support requests, please use our regular support channels.

2. Reporting and acknowledgment of receipt

Please use our reporting form to submit your report. The form will route your report directly to the appropriate department, where it will be incorporated into our processing workflow.

Report Form: Report a security vulnerability

The report form can also be used without providing your name.

We will confirm receipt of your report within five business days. Our regular business hours in the Central European Time Zone (CET/CEST) apply.

Your report to us does not replace any reporting obligations that may apply to you or your company.

3. Coordinated disclosure

We ask that you refrain from publishing information about a reported vulnerability or sharing it with third parties until a security update, workaround, or other appropriate measure is available and we have coordinated the timing of the disclosure with you.

Where necessary, we will coordinate with you, affected customers, manufacturers of integrated components, and relevant authorities and coordination bodies.

We comply with all legally mandated reporting obligations in the area of cybersecurity, in particular under Regulation (EU) 2024/2847 (Cyber Resilience Act). In doing so, we also take into account the need to protect our users from additional security risks.

4. Guidelines for reporters

We value the work of security researchers. If you adhere to the following principles, we will not assert any civil claims or file any criminal charges based on your investigation and report:

  • You act in good faith with the goal of improving security.
  • You investigate products only on your own systems or on systems you are authorized to test—not on third-party machines or equipment during normal operation.
  • You do not compromise any systems, alter, delete, or copy data beyond what is necessary to document your findings, and you do not make further use of the data obtained.
  • You refrain from social engineering, physical access, denial-of-service tests, and the introduction of malware.
  • You must report the vulnerability promptly and confidentially and must not publish any details prior to the agreed-upon disclosure.

This commitment is binding only on us. We cannot rule out decisions by law enforcement agencies or claims by third parties. It does not apply to actions that are clearly intended to cause harm or for personal gain.

5. Data Protection and Acknowledgment

We process personal data that you provide to us as part of your report exclusively for the purpose of handling the report and fulfilling legal obligations.

For more information, please see our privacy policy.

If the report is published, we will identify you by name or using an alias, as you request. There is no entitlement to be named or to receive compensation.

 

Responsible:
 WAGNER Group GmbH
 Schleswigstraße 1–5
 D-30853 Langenhagen

Effective as of: August 20, 2026

 

Machine-readable contact information: /.well-known/security.text