Coordinated Vulnerability Disclosure Policy

Cybersecurity Vulnerability & Incident Reporting

EU Cyber Resilience Act (Regulation EU 2024/2847)

At SCION Instruments, we are committed to maintaining the security, reliability and integrity of our software products and protecting our customers against cybersecurity threats.
In accordance with the EU Cyber Resilience Act (Regulation EU 2024/2847), SCION Instruments has established a reporting process for customers, distributors and authorised service partners to notify us of suspected or confirmed cybersecurity vulnerabilities and serious security incidents affecting SCION software products.

When Should You Submit a Report?

We request that you notify SCION Instruments without undue delay if you become aware of:

  • Suspected or confirmed exploitation of a cybersecurity vulnerability in SCION software.
  • Unauthorised access, malicious activity or security breaches affecting SCION software.
  • Significant security incidents affecting software functionality, data integrity, confidentiality or availability.

How to Report an Incident

If you identify or suspect a cybersecurity vulnerability or security incident, please complete our Cybersecurity Vulnerability & Security Incident Reporting Form using the link below.

Report Cybersecurity Vulnerability or Incident

Please provide as much relevant information as possible to support our investigation. You do not need to confirm that a breach has occurred before submitting a report. All reports will be reviewed by SCION Instruments to assess the potential impact, determine appropriate corrective actions and fulfil applicable regulatory reporting obligations. Your prompt reporting helps us maintain the security of SCION software and protect our customers.