Built on trust, transparency, and collaboration
Think you might have discovered a security vulnerability in one of our products? Then you’ve come to the right place. Our dedicated team is ready to work with you to resolve it as quickly as possible.
![](https://www.genetec.com/binaries/content/gallery/genetecweb/externalupload/photostock_male-it-headset-agent_custom-gettyimages-1501676435.jpg/photostock_male-it-headset-agent_custom-gettyimages-1501676435.jpg/genetecweb%3Asmall)
![](https://www.genetec.com/binaries/content/gallery/genetecweb/externalupload/photostock_programmers_devs_working_adobestock_480883891.jpeg/photostock_programmers_devs_working_adobestock_480883891.jpeg/genetecweb%3Asmall)
Scope of the program
Vulnerabilities affecting the products that are maintained as per our product lifecycle will be investigated and worked on by our team. In addition to the products, the following domains are also presently in this scope:
- *.clearance.network
- *.clearid.io
- *.genetec.cloud
- *.genetec.com
- *.genetec.one
- *.geneteccloud.com
- *.q2c.eu
- *.stratocast.com
- *.autovu.com
- *.curbsense.com
- *.autovu.cloud
Which vulnerabilities can you report?
Qualifying vulnerabilities
- Authentication flaws
- Circumvention of our platform/privacy permission models
- Elevation of privileges
- Cross-site scripting (XSS)
- Cross-site request forgery (CSRF/XSRF)
- Remote code execution
- SQL Injection
- Local file inclusion
- Insecure direct object reference
- Server-side request forgery
Out-of-scope vulnerabilities
- Vulnerabilities that rely on social engineering (this includes phishing attacks against Genetec employees)
- Denial of Service Attacks (DOS)
- Physical attempts against Genetec property or data centers
- Attack that assumes admin control of a service machine
- Missing best practices with no demonstrable security impact (i.e. missing HTTP headers, SSL/TLS configuration, etc.)