Vulnerability Reporting (PSIRT)

 

Reporting Security Vulnerabilities

Utimaco recognizes that strong security is built through collaboration. We are committed to working responsibly and constructively with customers, security professionals, security researchers, and the broader community to identify and address vulnerabilities.

We welcome and encourage responsible reporting of vulnerabilities. Every report we receive is treated with diligence and urgency, and we aim to acknowledge submissions promptly, communicate responsibly throughout the investigation process, and share relevant updates (Security Advisories and patches) as they become available.

If you discover a vulnerability, we encourage you to report it urgently and securely to the Utimaco PSIRT (Product Security Incident Response Team) who will address the report with urgency.

Any vulnerability report must be submitted encrypted, using PGP encryption, thereby preventing critical information from being accidentally disclosed.

(Step 1) Prepare Your Report

Include as much detail as possible to help us understand and reproduce the issue:

Short summary of the vulnerability
Description of the vulnerability
Affected product(s), version(s), and configuration
Describe product environment
Operating System used.
Step-by-step reproduction instructions
Possible Root cause.
Proof-of-concept code, screenshots, or logs (if available)
Potential impact and suggested remediation (optional)
Your contact information for follow-up and public PGP encryption key.

Any reports will be handled strictly confidentially, and no personal data will be shared with third parties

(Step 2) Encrypt Your Email with PGP

To protect sensitive information, you must encrypt your report using our PGP public PSIRT key before sending it.

  1. Import our PSIRT public key (provided below) into your PGP/GPG tool.
  2. Encrypt Vulnerability report using this key
  3. Submit email to PSIRT@utimaco.com with encrypted attachment.
  4. Optionally, sign your message with your own PGP key so we can verify authenticity.

PSIRT Contact

PSIRT team: PSIRT@Utimaco.com

PGP fingerprint: 77F3 05F8 11AF 228B 7623 33E5 DA5F 264E A9C1 64CB

PGP Key: Download

Last updated 21.09.2026