Security vulnerabilities
A flaw in an S32 product, service, or public system. Include what you found, how to reproduce it, and what you assess the impact to be. Encrypt if the detail warrants it and say so — we will reply with a key.
Trust & Compliance
Report a vulnerability or a concern.
If you have found a security flaw in something we build, or you believe an S32 capability is being used outside its lawful boundary, we want to hear it — including anonymously.
Misuse of a capability
A concern that an S32 capability is being used outside its lawful authority, or outside the terms it was supplied under. This reaches a reviewer who is not on the account team.
Active incident on your own systems
If you are a customer mid-incident, do not use this page — call the line so a responder picks up rather than an inbox.
What we commit to.
We will acknowledge that a report reached a human, tell you whether it is something we can act on, and tell you when it is closed. If a report concerns the conduct of a deployment, it is reviewed by someone outside the team that owns the account.
We do not run a paid bounty programme, and we do not publish a response-time commitment we are not staffed to meet. We would rather tell you what actually happens than quote a number.
Reporting in good faith.
We will not pursue action against a researcher who tests against our public systems in good faith, stops at the point of access, avoids other people’s data, and gives us a reasonable chance to fix the issue before disclosing it.
That protection does not extend to accessing customer data, degrading a service, or testing systems S32 operates on a customer’s behalf — those are their systems, not ours to authorise.
Anonymity.
A misuse concern can be raised without telling us who you are. You can also reach the Technical Analysis Unit line on the main number, which is not recorded and does not ask for your identity.
If you give us no way to reach you we cannot come back with questions — but we would rather have the report than the contact details.