Security Response Center

At ULTRALOQ, we take the security of our products and the privacy of our users seriously. We welcome reports from security researchers, customers, and other members of the security community who identify potential security vulnerabilities in ULTRALOQ products.

1. Report a Security Vulnerability

If you discover a potential security vulnerability in a ULTRALOQ product, please contact our security team:
Email: security@xthings.com
To help us understand and investigate the issue, please include as much of the following information as possible:
  • Product information: Product name, model, and firmware version.
  • Vulnerability description: A clear explanation of the potential security issue and its possible impact.
  • Reproduction steps: Steps to reproduce the issue, if available.
  • Supporting evidence: Relevant screenshots, logs, or other technical details.
  • Contact information: A way for our team to contact you for further information.
Please do not include passwords, access credentials, private keys, or unnecessary personal information in your report.

2. Response Time

We aim to respond to vulnerability reports within 48 hours. Please note that response times may vary due to time zone differences, weekends, and public holidays.

3. Vulnerability Handling

ULTRALOQ reviews reported security vulnerabilities and works to assess their potential impact and determine appropriate actions.
Depending on the nature and severity of the issue, our process may include:
  1. Reviewing the submitted report and requesting additional information where necessary.
  2. Assessing the potential impact on affected products and users.
  3. Investigating the issue and determining appropriate mitigation or remediation measures.
  4. Validating applicable fixes or mitigations before deployment, where appropriate.
The investigation and remediation process may vary depending on the nature, complexity, and severity of the reported issue.

4. Responsible Disclosure

We encourage responsible reporting of potential security vulnerabilities and ask security researchers to give ULTRALOQ a reasonable opportunity to investigate and address reported issues before publicly disclosing technical details.
Please make a good-faith effort to avoid privacy violations, service disruption, data destruction, or other harm while researching a potential vulnerability. Do not access, modify, or disclose other users' data without authorization.
We appreciate the cooperation of security researchers and the wider security community in helping improve product security.

5. Product Support

For product setup, troubleshooting, and general assistance, please visit the ULTRALOQ Support Center:
https://support.ultraloq.com/
For potential security vulnerabilities, please use the security reporting contact listed on this page.