Security contacts and procedures

EMV Softwares takes security very seriously and we aim to take immediate action to address serious security-related problems that involve our products or services.

Please report any suspected security vulnerability in a EMV Softwares product or service to the EMV Softwares Security Response Team, security@emvsoftwares.com.

When to contact the EMV Softwares Security Response Team

You should contact the Security Response Team if:

• You think there may be a security vulnerability in a EMV Softwares product or service
• You are unsure about how a known vulnerability affects a EMV Softwares product or service
• You want to provide feedback about our standards of service and performance. If you feel your comment or complaint is not dealt with in a satisfactory manner, please contact the technical support manager.

When not to contact the EMV Softwares Security Response Team

You should not contact the Security Response Team if:

• You require technical assistance (for example, “how do I configure my firewall?” or “how do I install patches due to security alerts?”)
• Your issue is not security related

In any of these cases, please contact technical support for your product instead.

Who reads email sent to security@emvsoftwares.com

Only members of the EMV Softwares Security Response Team, a restricted and carefully chosen group of EMV Softwares employees, will have access to material sent to the security@emvsoftwares.com address. No outside users can subscribe to this list.

What to send to security@emvsoftwares.com

Please provide as much information about your system and the issue as possible when contacting the list.

How we respond

Email sent to security@emvsoftwares.com is read and acknowledged with a non-automated response within three working days.

Any information you share with us about security issues that are not public knowledge is kept confidential within EMV Softwares. It is not passed on to any third-party without your permission.

Advance notification

EMV Softwares does not provide an advance notification service. Security advisories are available from within our Knowledge Base.