Synametrics Security Policies and Reporting Procedure

The Synametrics Security Team guides Synametrics projects and products on security issues and coordinates the handling of all security vulnerabilities.

Reporting a Vulnerability

We strongly encourage you to report potential security vulnerabilities to our private security team first, before disclosing them in a public forum. You may send emails to security@synametrics.com.

Please send your reports to our dedicated security contact address. To help us investigate as quickly as possible, provide a plain-text description for each vulnerability you are reporting, including steps to reproduce the issue.

Note: Only use security contacts to report undisclosed security vulnerabilities in Synametrics products and manage the process of fixing them. Regular bug reports or general support queries should be directed to our standard customer support channels.

Vulnerability Handling & Process

Unlike some open-source organizations, the Synametrics Security Team does not operate as a public CVE Numbering Authority (CNA). Instead, we follow a rigorous internal remediation pipeline:

• Internal Logging: Every newly discovered or reported security vulnerability is immediately entered into our secure, internal tracking database.
• Priority Assignment: Issues are analyzed and assigned a critical priority level based on severity, potential impact, and exploitability.
• Remediation: Our engineering and security teams collaborate closely to develop, test, and deploy a secure fix.

Vulnerability Information & Notifications

We believe in keeping our users secure and informed. Once a vulnerability has been addressed and a fix is ready:

• Email Alerts: Impacted users and administrators are actively notified via email regarding the security update.
• Website Documentation: Detail logs of the fixes and security advisories are published directly on the Synametrics Technologies website for public review and transparency.