The security of our products matters to us. If you believe you have found a security vulnerability in a RIGGTEK product – Dissolution Tester Dissilio, easyDISS, DissoPrep, Sampilio, their firmware or software – please report it to: it@riggtek.de
Where possible, please include:
-
affected product, serial number and firmware version (Setup → Help → About),
-
a description of the vulnerability and its potential impact,
-
steps to reproduce, a proof of concept if available,
-
whether you are aware of the vulnerability being exploited,
-
your contact details for questions (anonymous reports are accepted).
What we do
-
We acknowledge receipt of your report within 2 business days.
-
We assess the report, tell you the outcome and keep you informed about the remediation.
-
We provide security updates free of charge for the support period of the product and inform affected customers.
-
We report actively exploited vulnerabilities and severe incidents to BSI (CERT-Bund) and ENISA in accordance with the Cyber Resilience Act (EU) 2024/2847.
-
On request, we credit you in our security advisory.
Coordinated disclosure
Please do not publish details of the vulnerability before a fix is available or 90 days have passed since your report, whichever comes first. We are happy to agree on a different timeline.
Please do not access other people's data, do not disrupt instruments in productive laboratory use and only test on devices you are authorised to use. If you follow these rules and act in good faith, RIGGTEK will not take legal action against you.
Security advisories
Published security advisories and updates: