1. Our Approach to Security

At Translogi, cybersecurity is a fundamental part of how we design, manufacture, and support our camera hardware and local firmware. We are committed to protecting the operators and integrators who deploy our Devices by proactively identifying and addressing security vulnerabilities. We encourage security researchers, industry professionals, customers, and partners to report any security concerns they discover in our products and services.

2. Reporting a Security Vulnerability

2.1 How to Notify Us

If you identify a potential security vulnerability in a Translogi product or service, please contact our security response team directly. We have a structured process in place to review, assess, and resolve reported issues efficiently.

Contact Email: security@translogi.us

Subject Line Format: “Vulnerability Report – [Product Name] – [Brief Summary]”

2.2 Information Required in Your Report

For a thorough assessment and swift resolution, we request the following details:

• Your name, organization (if applicable), and contact information.
• A concise description of the vulnerability, including its category and potential impact.
• The affected product(s), model number(s), and firmware version(s).
• Technical documentation, proof of exploitation, or a proof of concept (PoC), if available.
• Any recommendations for mitigating or resolving the issue.
• A proposed disclosure timeline, if applicable.

3. Our Vulnerability Handling Process

Translogi takes every vulnerability report seriously and follows a structured approach to resolving security concerns:

• Acknowledgment: Within five business days, we will confirm receipt of the report and initiate an internal review.
• Assessment & Verification: Our security team will analyze the reported issue, determine its severity, and validate its authenticity.
• Regular Status Updates: Throughout the investigation and resolution process, we will provide periodic updates to the reporter to keep them informed of our progress.
• Remediation Plan: We will develop and implement a resolution, which may include firmware security patches, configuration guidance, or other mitigation measures.
• Testing & Validation: Before release, all fixes undergo testing to confirm their effectiveness and security compliance.
• Customer Notification & Disclosure: Once a fix is available, we will notify affected parties and, when necessary, provide a public advisory with recommendations.

Remediation timelines are determined based on the severity and complexity of each reported vulnerability. Our goal is to remediate vulnerabilities as promptly as possible, targeting completion within 90 days of receiving a valid report. This target may extend for vulnerabilities that involve third-party or open-source components, require hardware-level changes, or depend on information from external parties.

4. Confidentiality and Responsible Disclosure

Translogi handles all reported vulnerabilities with strict confidentiality. Information is shared only with personnel whose involvement is necessary for the remediation process.

In accordance with the principles of Coordinated Vulnerability Disclosure (CVD), Translogi requests that security researchers refrain from publicly disclosing any vulnerability before the end of the 90-day disclosure period or another mutually agreed-upon date. Researchers are also expected to conduct vulnerability research within the bounds of applicable law and in a manner that does not cause harm to Translogi, its partners, or its customers, compromise privacy, or put security at risk.

For more information about Coordinated Vulnerability Disclosure, please refer to the following resources:

• ISO/IEC 29147:2018 — Vulnerability Disclosure
• The CERT® Guide to Coordinated Vulnerability Disclosure

Translogi complies with applicable security and privacy laws and regulations and takes reasonable measures to protect sensitive vulnerability information. Translogi will not disclose vulnerability details to third parties unless explicitly requested by the affected customer or required by law.

5. Firmware Updates and Local Delivery

Translogi Devices operate on local firmware and do not depend on any cloud-based management or update service. Security updates are released as firmware packages that operators apply locally, through the Device’s local configuration interface or an official local update utility provided by Translogi.

Because updates are delivered locally rather than pushed automatically over the internet, operators and integrators are responsible for obtaining released firmware from official Translogi channels and applying it to their Devices in a timely manner. Translogi will publish clear instructions with each security update to support this process.

6. Our Commitment to Cybersecurity

Security is an ongoing priority at Translogi. We continuously strengthen our products by collaborating with security researchers and industry professionals. Every reported vulnerability is treated with urgency and diligence, so that our customers can operate secure and reliable Devices.

7. Security Update Commitment & Security Support Period

• Security Support Period: Translogi provides security updates and patches for its products for at least five (05) years from the product release date. For end-of-life (EOL) products, security maintenance continues for a specified period after the Discontinuation Date, as described in the Translogi Product Discontinuation Statement.
• Update Frequency: Security updates are released on a regular basis, or as needed when critical vulnerabilities are identified.
• Notification Method: Users are informed about security updates through official Translogi channels, including our website, security bulletins, and direct communication with distributors and integrators.

✓