Skip to main content

Security and Vulnerability Disclosure

Last updated: October 24, 2026

We want to hear about security problems in RackSentinel products. If you think you found a vulnerability, please report it to us privately so we can fix it before it is made public.

How to report

Send an email to info@racksentinel.com. Please include:

  • The product or component, and the version if you know it.
  • The steps to reproduce the problem.
  • The possible impact.
  • How we can contact you.

Scope

  • The racksentinel.com website.
  • The RackSentinel cloud dashboard and its APIs.
  • RackSentinel gateway firmware and hardware.
  • RackSentinel rack sensors.

What we do

  • We aim to confirm that we received your report within 5 business days.
  • We investigate the report and tell you what we found.
  • We keep you informed while we work on a fix.
  • We agree a disclosure date with you. If you want, we credit you when we publish the fix.

What we ask

  • Give us reasonable time to fix the problem before you disclose it. We suggest 90 days.
  • Do not access, change, or delete data that is not yours. If you reach customer data, stop and tell us immediately.
  • Do not test gateways or sensors that are installed at customer sites. Use only equipment that you own.
  • Do not do denial-of-service tests, social engineering, or physical attacks.

Bug bounty

We do not run a paid bug bounty program at this time.

security.txt

Our security contact is also published in /.well-known/security.txt (RFC 9116).