Videojet Technologies
Vulnerability disclosure program on security.txt videojet.com
- Top reward
- No cash rewards
- Top severity paid
- Not published
- Assets in scope
- 2
- Public CVEs
- 0
- Last change
- No changes yet
At a glance
What to know before you start testing.
- No cash rewards
- A disclosure program: you report for credit, not money.
- Report by email
- [email protected]
- Partial safe harbor
- Some legal protection; read the terms.
- Replies within 5 days
- As the policy promises.
- Publish after a fix
- Coordinate the timing with the company.
Rewards
What the company's own policy page says it pays.
This program does not pay cash rewards.
- Response
-
Within 5 days
Acknowledge receipt of the submission, typically within five (5) business days, although response times may vary depending on the nature and complexity of the report.
- Safe harbor
-
Partial
Where researchers act in good faith, comply with this policy, and make reasonable efforts to avoid harm, Videojet does not intend to pursue legal action solely in connection with such research activities.
- Hall of fame
-
Yes
If a reported vulnerability is verified and publicly disclosed, Videojet may acknowledge the reporting individual or organization, if requested and where appropriate.
Summarised with AI from the company's policy, read 12 Nov 2026, and checked word for word against it. Read the original
Scope
2 assets you may test, 2 excluded.
Domains 1
- videojet.com
Products and areas 1
- Videojet products and services
Out of scope (2)
- active production systems
- customer production environments
Rules
What the policy asks of you, and the bug types it won't reward, quoted from Videojet Technologies's policy.
While testing
-
Avoid actions that could negatively affect the confidentiality, integrity, or availability of Videojet products, services, customer data, or customer operations;
-
Avoid accessing, modifying, deleting, or exfiltrating data that does not belong to them;
-
Avoid testing on active production systems or customer production environments;
-
Promptly report discovered vulnerabilities to Videojet and provide sufficient information to enable validation and remediation;
-
Comply with all applicable laws and regulations.
-
Please do not include sensitive information such as personally identifiable information (PII), usernames, passwords, customer production data, or other confidential information in any submission.
-
Testing should not be performed on active production systems, and products subjected to security testing should not subsequently be used in production environments.
Summarised with AI from the company's policy, read 12 Nov 2026, and checked word for word against it. Read the original
Changes
Tracked since 12 Nov 2026. Last checked 3 hours ago.
No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.
Public CVEs
Published vulnerabilities in this vendor's products, from the NVD.
No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.