Security

How to report a vulnerability in this website or in any 8020 Lab product. Machine-readable contact: /.well-known/security.txt.

Reporting a vulnerability

Email [email protected] with a description, the product and version affected, and steps to reproduce. Please do not open a public issue. Reports are acknowledged within 3 business days, and a fix or mitigation plan is shared within 30 days for confirmed issues. Reporters are credited unless they ask not to be.

Supported versions

The latest released version of each product receives security fixes. Products marked "Coming soon" have no released version yet.

Actively exploited vulnerabilities

If a vulnerability is being actively exploited, or a severe incident affects a product, the maker notifies through ENISA's Single Reporting Platform, as the EU Cyber Resilience Act requires: an early warning within 24 hours of becoming aware, a notification within 72 hours, and a final report within 14 days of a fix (one month for incidents). Users are told what to do on this website and in the release notes.

This website

A static site: no accounts, no forms, no cookies and no third-party scripts. Every page is served over HTTPS with a strict Content-Security-Policy, and other sites cannot frame it.