SSAR Group is committed to maintaining the security and integrity of our software products, systems, and customer data. We take security vulnerabilities seriously and appreciate the efforts of security researchers and users who help us maintain a secure environment.

If you discover a security vulnerability in any SSAR Group software, open source code, service, or product, please report it through one of the following secure channels:

1 - Primary Reporting Methods

• Email: Send a detailed report to secure@ssar-group.com
• Subject line: [SECURITY VULNERABILITY]
• Include a detailed description of the vulnerability
• Provide steps to reproduce the issue
• Include any relevant technical details or proof of concept

2 - Security Portal: Submit a report via our Security Support Website

To help us assess and address the vulnerability efficiently, please include:

• Description of the vulnerability and its potential impact
• Detailed steps to reproduce the issue
• Affected versions, products, or components
• Any proof-of-concept code or screenshots
• Your contact information for follow-up questions

When you report a security vulnerability to SSAR Group, we commit to:

• Acknowledging receipt of your report within 48 business hours
• Providing an initial assessment within 5 business days
• Keeping you informed of our progress throughout the investigation
• Crediting you for the discovery (unless you prefer to remain anonymous)

SSAR Group follows a Coordinated Vulnerability Disclosure (CVD) process. We request that security researchers:

• Allow us reasonable time to investigate and address the vulnerability before public disclosure
• Make good faith efforts to avoid privacy violations, data destruction, or service interruption
• Do not exploit the vulnerability beyond what is necessary to demonstrate the issue

For complete details, please review our Coordinated Vulnerability Disclosure Policy.

For security-related matters, we conduct all correspondence in English to ensure clear communication and expedited response times. For general inquiries, we accommodate your preferred language where possible.

For other security-related questions or concerns:

• Primary: secure@ssar-group.com
• Security Compliance: sc@ssar-group.com¹

This security policy applies to:

• All SSAR Group software products and services
• Official SSAR Group repositories and open source projects
• SSAR Group web properties and infrastructure
• Third-party integrations and add-ons developed by SSAR Group