Product Security

Intro: Vastnaut is committed to the security of our products and services. This page explains how to report a potential security vulnerability and provides information about the minimum security update period for Vastnaut One.

Vulnerability Disclosure Policy

If you believe you have identified a potential security vulnerability affecting a Vastnaut product, mobile application, firmware, cloud service, or website, please report it to us at support@vastnaut.com.
To help us investigate, please include as much of the following information as possible:
  • The affected product or service
  • The firmware, application, or software version
  • A clear description of the potential vulnerability
  • Steps to reproduce the issue
  • The potential impact
  • Relevant screenshots, videos,logs, or proof-of-concept material
  • Your contact information
Please do not include personal data that is not necessary for us to investigate the issue.



What to Expect

We will acknowledge receipt of your report within 7 business days. We may contact you if we need additional information to investigate the issue.
Until the reported vulnerability is resolved, we will provide you with a status update at least once every 15 calendar days.
We will review and validate the report, assess the potential risk, and take appropriate action based on the nature and severity of the issue. The time required to resolve an issue may vary depending on its complexity and impact.



Responsible Research

When conducting security research, please act in good faith, avoid accessing or changing data that does not belong to you, and do not disrupt our products or services. Please give us a reasonable opportunity to investigate and address the issue before making it public.
Vastnaut does not currently operate a vulnerability reward or bug bounty program.

Security Update Period

Vastnaut will provide security updates for Vastnaut One where necessary to address identified security vulnerabilities during the minimum security update period shown below.
Product
Release Date
Last Updated
Minimum security update period
Vastnaut One


Until at least Dec 31, 2028
If user action is required to install a security update, we will provide appropriate instructions through our official support or product update channels.