Salto Vulnerability Disclosure
By Salto Vulnerability disclosure program on Intigriti saltosystems.com
- Top reward
- No cash rewards
- Top severity paid
- Not published
- Assets in scope
- 30
- Public CVEs
- 0
- Last change
At a glance
What to know before you start testing.
- No cash rewards
- A disclosure program: you report for credit, not money.
- Report on Intigriti
- Submit through the program page.
- Full safe harbor
- Good-faith research is authorised; no legal action.
- Replies within 5 days
- As the policy promises.
- No public write-ups
- Keep findings private.
Rewards
What Intigriti lists as the payout for each severity.
This program does not pay cash rewards.
- Pays cash
-
Yes
For other assets we may pay out a bounty depending on the severity of the finding and the quality of the report.
- Response
-
Within 5 days
We aim to validate all submissions within 5 working days.
- Safe harbor
-
Partial
Make a good faith effort to avoid any privacy violations, data destruction or degradation of our services
Summarised with AI from the program policy on Intigriti, read 12 Nov 2026, and checked word for word against it. Read the original
Scope
30 assets you may test.
Wildcard domains 30
- *.cognitec.com
- *.cognitec-systems.de
- *.danalockapps.com
- *.danalock.com
- *.danalock.dk
- *.danalock.eu
- *.danalockservices.com
- *.enviso.io
- *.enviso.shop
- *.gantner.be
- *.gantner.cloud
- *.gantner.com
- *.gantnerindia.com
- *.guidemylock.dk
- *.my-clay.com
- *.mylock.dk
- *.poly-control.com
- *.poly-control.dk
- *.polycontrol.dk
- *.poly-lock.dk
- *.recreatex.be
- *.saltoapis.com
- *.saltohomesolution.com
- *.saltoks.com
- *.salto-orion.app
- *.saltosystems.com
- *.saltowecosystem.com
- *.vintia.cloud
- *.vintia.com
- *.wecosystem.com
Rules
What the policy asks of you, and the bug types it won't reward, quoted from Salto Vulnerability Disclosure (via Intigriti)'s policy. "We" in these lines means the program, not this site.
While testing
-
Respect the scope of the program
-
Not discuss or disclose vulnerability information without prior written consent (including PoC's on YouTube and Vimeo)
-
Make a good faith effort to avoid any privacy violations, data destruction or degradation of our services
-
Do not post or discuss vulnerabilities without our consent, remember to upload any evidence such as pictures or recordings in accordance with this
-
Include a clear attack scenario, we need to know how an issue will potentially affects us. The clearer the better and we appreciate any mitigation suggestions
-
Do not use social engineering or similar to achieve an exploit.
-
Do not access more than is needed to demonstrate your exploit.
-
Keep information about any vulnerabilities you’ve discovered confidential between yourself and Salto Systems until we resolve the issue.
Summarised with AI from the program policy on Intigriti, read 12 Nov 2026, and checked word for word against it. Read the original
Changes
Tracked since 11 Nov 2026. Last checked 18 minutes ago.
No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.
Before we tracked it
Scope and reward changes recorded before this page started tracking it.
-
Scope removed
*.dejoris.de
-
Scope removed
*.baeder-suite.de
-
Scope removed
*.gantnercloud.com
-
Scope added
*.gantner.cloud
-
Scope removed
*.poly-control.com
-
Scope removed
*.enviso.io
-
Scope removed
*.danalock.dk
-
Scope removed
*.danalock.com
-
Scope removed
*.wecosystem.com
-
Scope removed
*.gantner.com
-
Scope removed
*.mylock.dk
-
Scope removed
*.saltosystems.com
-
Scope removed
*.my-clay.com
-
Scope removed
*.saltoks.com
-
Scope removed
*.gantnerindia.com
-
Scope removed
*.gantner.be
-
Scope removed
*.saltoapis.com
-
Scope removed
*.salto-orion.app
-
Scope removed
*.poly-control.dk
-
Scope removed
*.cognitec.com
-
Scope removed
*.guidemylock.dk
-
Scope removed
*.vintia.com
-
Scope removed
*.poly-lock.dk
-
Scope removed
*.vintia.cloud
-
Scope removed
*.cognitec-systems.de
-
Scope removed
*.saltowecosystem.com
-
Scope removed
*.danalock.eu
-
Scope removed
*.polycontrol.dk
-
Scope removed
*.recreatex.be
-
Scope removed
*.enviso.shop
-
Scope removed
*.danalockservices.com
-
Scope removed
*.danalockapps.com
-
Scope removed
*.saltohomesolution.com
-
Scope removed
*poly-control.com
-
Scope removed
*.envisio.io
-
Scope removed
*.mysmartlock.com
Public CVEs
Published vulnerabilities in this vendor's products, from the NVD.
No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.
Original policy
Copied from www.intigriti.com on 12 Nov 2026. The summaries on this page are made from it; the live page may have changed since.
Description
Welcome to Salto's responsible vulnerability disclosure program. Here you can report any finding which does not fit into any of our other bug bounty programmes on Intigriti.
Salto is a global leader in electronic access control. We design, develop, and manufacture hardware and software for access control systems covering a wide range of uses. Salto locks are installed in all types of buildings, single family housing, hotels, university buildings and dorms, marine applications, critical infrastructure, and many other types of locations.
As an access control company security is fundamental to everything we build. We take all reports seriously and strive to always give reports fair triaging. As this is a VDP, bounties are not guaranteed, but we may award compensation at our discretion depending on the nature and impact of the finding. Thank you for helping us make access control more secure.
You can learn more about us on our website https://saltosystems.com/
Rules of engagement
By participating in this program, you agree to:
- Respect the Community Code of Conduct
- Respect the Intigriti Terms and Conditions
- Respect the scope of the program
- Not discuss or disclose vulnerability information without prior written consent (including PoC's on YouTube and Vimeo)
Our promise to you
- If you need any assistance or have questions related to our products take a look at our support page https://support.saltosystems.com/ or feel free to ask us a question
- We aim to validate all submissions within 5 working days.
Your promise to us
- Make a good faith effort to avoid any privacy violations, data destruction or degradation of our services
- Do not post or discuss vulnerabilities without our consent, remember to upload any evidence such as pictures or recordings in accordance with this
- Include a clear attack scenario, we need to know how an issue will potentially affects us. The clearer the better and we appreciate any mitigation suggestions
In scope
Our goal is to secure software, after all our customers trust us to secure their physical environment! We think we've done a pretty good job but we know that no implementation is perfect, we hope that you can help us spot the imperfections.
Please let us know prior to submission if you believe you've identified a vulnerability in a domain or asset belonging to Salto but which is missing from the in scope domains.
Anything related to the following scenarios would be considered extra interesting for us:
- Unauthorised lock openings, or escalating/changing access rights to locks without having the permissions to do so;
- Accessing data belonging to other sites (a site is typically representing a physical building/ lock installation) without permissions to do so;
- Deleting or obfuscating event logs;
- Remote code execution.
Having said that remember that our products are used to secure physical locations like the front door of your home. If you can think of a scenario that would make you very uncomfortable with having one of our products mounted to your front door then that is probably a pretty good angle of attack.
Out of scope
Any subdomain which is part of our bug bounty programs are out of scope for this vulnerability disclosure program, please submit them in our bug bounty programs instead. If you are unsure which program a submission belongs to you can reach us using [email protected].
Please note that our bug bounty programs use accept or staging environments to allow safer testing. A finding belonging to a production version of a program scoped asset should be submitted to the bug bounty program in most cases. Example prd.api.domain.com should be submitted in the program containing acc.api.domain.com. Please ask us if you are unsure.
We require that all researchers take into account the respect for the law. Do not use social engineering or similar to achieve an exploit. Do not access more than is needed to demonstrate your exploit.
Example of out of scope actions:
- Using social engineering
- Compromising the system and persistently maintaining access to it
- Changing the data accessed by exploiting the vulnerability
- Using malware
- Using the vulnerability in any way beyond proving its existence. To demonstrate that the vulnerability exists, the reporter could use non-intrusive methods. For example, listing a system directory
- Using brute force to gain access to systems
- Sharing vulnerability with third parties
- Performing DoS or DDoS attacks
Keep information about any vulnerabilities you’ve discovered confidential between yourself and Salto Systems until we resolve the issue.
Severity
This program follows Intigriti's triage standards based on the proof of concept.
FAQ
Where can I get credentials for your applications?
Please visit our other bug bounty programs to gain access to bug bounty assets. Assets which are not included in our other programs are generally out of scope for researcher invites but you can send an email to [email protected] and request access if you believe you've found an exceptional issue.
I believe I've found something which demands urgent attention.
Please send us an email at [email protected] and include the Intigriti submission ID or details of your finding.
Rewards
While we do not offer bounties for reported vulnerabilities, we deeply appreciate your contribution to securing our assets.
If a vulnerability falls within the scope of one of our bug bounty programs assets but was handled in this program for any reason, we will provide a bonus equivalent to the bounty amount, ensuring fair compensation for your efforts. For other assets we may pay out a bounty depending on the severity of the finding and the quality of the report.