Skip to search Skip to main content Skip to navigation

DwyerOmega Product Cyber Resilience Vulnerability Management

DwyerOmega is committed to protecting customers and reducing cybersecurity risk associated with its products, firmware, software, applications, connected services, devices, and digital components.

Our Cyber Security Incident Response Team, or CSIRT, manages the intake, assessment, investigation, coordination, remediation, and disclosure of product cybersecurity vulnerabilities and incidents affecting DwyerOmega products.

DwyerOmega takes cybersecurity concerns seriously. When a cybersecurity concern is reported, we assign the appropriate resources to review, validate, prioritise, and address the issue following a coordinated vulnerability disclosure process.

Please do not publicly disclose vulnerability details, exploit code, proof-of-concept material, or other technical information that could increase risk to customers until DwyerOmega has had a reasonable opportunity to investigate, mitigate, and coordinate disclosure where appropriate.

DwyerOmega may issue a Security Notice where customer action, mitigation, remediation, update, or public communication is required.

Report a Product Cybersecurity Vulnerability or Incident

DwyerOmega encourages responsible reporting of cybersecurity concerns affecting DwyerOmega products, firmware, software, mobile applications, cloud-connected services, connected services, or digital components.

Please read the types of reporting below and use the correct reporting route to submit your report.

Active Exploitation or Severe Security Incident

Select this option if a vulnerability is currently being exploited or targeted, or if a cybersecurity event has caused a significant impact to product security, availability, integrity, confidentiality, or safe operation.

Examples include unauthorised access, compromise of product firmware or software, disruption of secure operation, or a security event affecting customer use of a DwyerOmega product.

Potential Vulnerability

Select this option if you have identified or suspect a cybersecurity weakness, even if it has not been exploited.

Examples include authentication weaknesses, insecure communication, exposed interfaces, firmware or software flaws, insecure update mechanisms, configuration weaknesses, or vulnerabilities in third-party components used by a DwyerOmega product.

Published Security Notices

DwyerOmega recommends that customers review the relevant Security Notices and follow the mitigation, remediation, update, configuration, or other guidance provided for the described security issue.

Security Notices may be updated as new information, mitigations, or remediations become available. Customers should check the notice status and last updated date before taking action.