Security Vulnerability Process

Security vulnerabilities relating to Vont products are considered highly urgent. The urgency of the response will depend on the severity level of the issue identified by the Vont Cybersecurity team. It consists of a five step-by-step process below:

Discovering – The reporter will identify the possible vulnerability, and immediate reporting of the problem is highly recommended. 

Reporting – The Vont Cybersecurity team will notify the reporter in the form of acknowledgment about the possible vulnerabilities that have been reported via pre-analysis.

Assessment – The Vont Cybersecurity team will validate the report about possible vulnerability and examine the severity of the issue. This is the first stage of confirming the said vulnerability, identifying potential risk, and regulating the danger.

Solution –  After a thorough study, the Vont Cybersecurity team will provide workarounds to address the temporary solution of the issue while creating the permanent solution to be handed over within 24-48 hours depending on the cruciality of the said vulnerability.

Communication – The Vont Cybersecurity team provides public advisory that should be implemented accordingly in any means of communication as diagnosed by their assessments.

We encourage you to send any possible security Vulnerability to security@vont.com.The Vont Cybersecurity team will require the following information and shall be included in the details: 

Description of the potential vulnerability: 

The affected device

• Physical MAC address
• Android/iOS version
• App version of any third-party devices involved (Alexa or Google Assistant)
• App version of Vont Home app
• App log

The information will be treated as extremely sensitive.

PGP Public Keys

You may use the Vont Cybersecurity Team public PGP key to encrypt email with sensitive information and to verify that security communications sent by Vont are genuine.

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=HZs/
-----END PGP PUBLIC KEY BLOCK-----