Harvia Vulnerablity Disclosure

Harvia is committed to the cybersecurity of our products and services. If you suspect or know that you have

• discovered a cybersecurity vulnerability, or

• experienced a cybersecurity incident, or

• nearly missed a cybersecurity incident

related to Harvia products, software, or online services, we really want to hear from you as soon as possible.

Please send your report to: security@harvia.com

To help us evaluate and address the issue as quickly as possible, please include as much of the following information as you can:

• The product, system, or service affected (including model, firmware/software version, or URL, where applicable)

• A description of the suspicious event, vulnerability or incident or near miss and its potential impact – please describe what you expected to happen, and what occurred.

• Step-by-step instructions to reproduce the issue, if possible

• Any supporting material, for example screenshots, logs, or proof-of-concept code

• Your contact information, including information about the country where the issue occurred, so we can follow up with you

We ask anyone investigating or reporting on a cybersecurity issue, please:

• Act in good faith and avoid privacy violations, data destruction, or service disruption.

• Avoid accessing, modifying, or deleting data that does not belong to you.

• Do not exploit vulnerability beyond what is necessary to demonstrate it.

• We ask that you give us a reasonable opportunity to investigate and address the issue you reported before disclosing it publicly.

This reporting channel is intended for genuine cybersecurity suspicious events, vulnerabilities and incident reporting!

General customer support requests, product complaints, or non-security bugs should be directed to our regular customer service channels instead.

Thank you for helping us keep Harvia products and services secure.