Responsible Disclosure

Coordinated disclosure

Balik Research follows coordinated disclosure.

When our research identifies a vulnerability in a product, we first report it privately to the affected vendor.

We agree on the timing of publication together with the vendor.

Scope

This policy covers vulnerabilities that Balik Research identifies during its research on embedded systems, automotive microcontrollers and firmware.

It also covers security issues reported to us about Balik Research itself, including this website.

Contact

Vendors and researchers can reach us at contact@balikresearch.org.