Security
Found a security problem? Tell us.
Fleets trust Trackingen with where their vehicles are. If you find a weakness in anything we make, we want to hear about it first, and we will work with you to fix it.
How to report
Use the form on this page. Describe what you found, the steps to reproduce it and which part is affected. Leave a way to reach you if you want us to keep you informed, or report without giving your name. Please keep the details to yourself until we have fixed the problem together.
What we promise
- We confirm your report within 3 working days.
- If you left a way to reach you, we keep you informed while we look into it and fix it.
- We fix what we confirm and agree with you when to make it public, typically within 90 days.
- If you wish, we name you when we publish the fix.
What this covers
Everything Trackingen makes:
- The Trackingen platform: the panel, the app and the interface other programs use
- The service our trackers connect to
- The software on our trackers
- BoardSmith, the page we prepare trackers with
Safe harbour
We will not take legal action against research done in good faith under this policy, and we will ask others not to either. Good faith means that you:
- respect everyone's privacy: look only at the data you need to show the problem, and neither keep nor share it
- do not disrupt the service, for example by flooding it or by heavy automated testing
- do not destroy or change data
- give us reasonable time to fix the problem before you tell anyone else
Reporting to the authorities
When a vulnerability in one of our products is actively exploited, or a severe incident affects its security, we report it to the authorities as the EU Cyber Resilience Act requires, and we inform the customers affected. We may pass on the technical details of your report. We pass on your contact details only with your consent.