The cyber security of our products is a top priority for REFORM.
 

The REFORM Vulnerability Disclosure Programme (VDP) follows the principles of Coordinated Vulnerability Disclosure (CVD) and enables security researchers, customers and partners to report vulnerabilities in REFORM products in a responsible, structured and straightforward manner.

The REFORM VDP meets all requirements of the EU Cyber Resilience Act (CRA) and provides a transparent process for receiving, assessing, coordinating, and addressing reported vulnerabilities. Further information can be found here: https://reform.psirt.at/en/

Reporting vulnerabilities 

To report vulnerabilities, please use our reporting form at the REFORM Product Security Center

Please note:

• Reports must relate exclusively to physical REFORM products (e.g. Metrac H75 or Muli T8X).
• Vulnerabilities on websites (e.g. www.reform.at) or other digital services from REFORM are not part of this reporting process
• REFORM treats all reports confidentially and in accordance with the requirements of the Cyber Resilience Act
   

We thank you for your support in the responsible disclosure of vulnerabilities and the continuous improvement of the security of our products.