Product Security & Vulnerability Disclosure
Security Monitoring & Incident Response
We monitor the cybersecurity of our products real-timely (7×24) through an integrated monitoring system, which automatically receives alerts and reports via email to help us address vulnerabilities promptly.
When an incident occurs or a report is received, our cybersecurity team will take actions within 2 hours. The incident or the report will be confirmed within 1 day, after which we will conduct preliminary assessment on it. The assessment will be completed within 2 days followed by a vulnerability-fixing plan.
Vulnerability Classification & Fix Timeline
Based on their severity and impact, vulnerabilities are divided into four levels with corresponding time window for fixing:
-
Highly Critical Vulnerabilities
Will be fixed within 3 days -
Critical Vulnerabilities
Will be fixed within 5 days -
Serious Vulnerabilities
Will be fixed within 7 days -
General Vulnerabilities
Will be fixed within 15 days
Sometimes restricted by unavoidable factors, the time window above-mentioned may be expanded based on actual situations.
Product Security Support Period
| Model | Sensor | Companion App |
|---|---|---|
| KS1 | Security update unsupported. The use life is 14 days. |
Security update supported. Latest version and release date: iOS: 01.07.02.00; 17/09/2025 Android: 01.08.00.00; 14/11/2025 Support ends after 5 years from the date of release. |
| KS3 |
To make our products safer, we appreciate all people who find and report vulnerabilities to us. It's our ultimate goal to prevent cybersecurity incidents, or minimize the harm caused by them if they happened unexpectedly. We strive for providing superior product maintenance services and protecting public interests.
If you find any vulnerability, please describe it in detail and contact us through: support@sibiosensor.com.