Security

Waystream is committed to developing and maintaining secure networking products throughout their supported lifecycle.

We welcome responsible vulnerability reports from customers, security researchers, partners and other stakeholders and support the principles of Coordinated Vulnerability Disclosure (CVD).

Waystream's Product Security Program aligns with Cyber Resilience Act (CRA).

If you believe you have discovered a security vulnerability affecting a Waystream product, please report it to our Product Security Incident Response Team (PSIRT).

Early reporting helps us investigate, validate and resolve vulnerabilities before they can impact our customers.

Waystream is grateful for help from the security community but we are not offering any monetary rewards for security reports.

Waystream supports encrypted communication using PGP. When reporting security issues it is possible to encrypt sensitive information using this Waystream OpenPGP key:

Security updates for supported Waystream products are made available through the Waystream Customer Portal together with relevant advisory information and recommended actions.

Waystream provides vulnerability handling and security updates during the applicable product support period.

Information about product lifecycle and applicable support periods is available in the relevant product documentation.