Cybersecurity at Everllence
Everllence is committed to continuously identifying, assessing, and addressing security issues affecting its products, services, and corporate infrastructure.
We welcome reports of potential security vulnerabilities affecting our infrastructure (IT / CSIRT) or products (OT / PSIRT). If you become aware of a potential vulnerability, weakness, or other security issue, we encourage you to contact us. All reports are reviewed in accordance with our secure development and vulnerability management processes. Where appropriate, identified issues will be remediated in a timely manner.
A detailed Coordinated Vulnerability Disclosure (CVD) – Policy can be found here: CVD
Infrastructure (CSIRT)
If you would like to report a vulnerability affecting Everllence infrastructure, such as websites, portals, extranets, or other IT services, please send the details of the identified security issue to cybersecurity@everllence.com.
To ensure confidentiality, please encrypt your report using the following PGP key:
Products (PSIRT)
If you would like to report a vulnerability affecting an Everllence product with digital elements, such as engines, turbomachinery, data loggers, control systems, or related software and hardware components, please send the details of the identified security issue to cybersecurity-ot@everllence.com.
To ensure confidentiality, please encrypt your report using the following PGP key:
Anonymous Reporting
Vulnerability reports may be submitted anonymously, for example by using a temporary or one-time email address.
Please note that Everllence may not be able to respond to reports submitted in this way if the email address used is no longer available. If follow-up communication is not possible, requests for additional technical information or clarification cannot be addressed, which may limit our ability to investigate, validate, and remediate the reported vulnerability.
For efficient processing of vulnerability reports, we recommend using a communication channel that remains available for follow-up questions.
Everllence Security Text Option
As required by the Cyber Resilience Act (CRA) and BSI TR-03183, Everllence provides a security.txt file containing the relevant PSIRT contact information and vulnerability disclosure details.
The security.txt file can be accessed here: security.txt
The corresponding PGP key referenced in the security.txt file is available here: securitytxt-pgp.asc
The fingerprint of the PGP key is: 3504B9FEACE91F1159DE8DF01643B9771CA62048