Cybersecurity at ZIEHL

The increasing connectivity of products and systems is placing ever greater demands on cyber security. Protecting our products and the associated systems against potential cybersecurity risks is therefore a key part of our product responsibility.

At ZIEHL, we actively monitor current developments and requirements in the field of cybersecurity. This also includes the requirements of the Cyber Resilience Act (CRA), which we take into account as we further develop our processes and structures. We consider security aspects throughout the entire product lifecycle and continuously develop our measures and processes.

Open communication with customers, partners and security experts is particularly important to us. Reports of potential vulnerabilities help us identify risks at an early stage and continuously improve our products.

Report a Security Vulnerability

Have you discovered a potential security vulnerability in a ZIEHL product or related software?

We ask you to report any such issues to us as soon as possible. Please use our central email address for this purpose: security@ziehl.de

Please include the following information in your report where possible:

Affected product: product name, type and, if known, firmware or software version
Description of the vulnerability: A detailed description of the identified issue
Reproducibility: Steps required to reproduce the vulnerability
Further technical information: For example, screenshots, log files or proof-of-concepts, if available
Contact details: Your name and email address for any follow-up questions

The more detailed the information provided, the better we can understand and assess the reported issue.

Responsible Disclosure
We ask that information about potential security vulnerabilities be treated confidentially and that you allow us sufficient time to analyze and assess the issue before making any information publicly available.

When investigating a potential vulnerability, please also refrain from taking any actions that could modify data, impair the availability of systems, or compromise the protection of personal or confidential information.

Handling Reported Security Vulnerabilities

We take reports of potential security vulnerabilities seriously and investigate the issues reported to us.

Upon receipt of a report, we review the information provided and assess the circumstances described. Depending on the nature and severity of the potential vulnerability, we consider appropriate next steps.

Our internal processes and structures for managing cybersecurity risks are currently being established and are subject to continuous improvement. This includes the gradual development of structures aligned with the principles of a Product Security Incident Response Team (PSIRT). Our goal is to sustainably integrate cybersecurity into our development, product and quality processes.

Working Together for Secure Products

Cybersecurity is an ongoing process that requires communication and collaboration among all stakeholders.

By reporting potential vulnerabilities, you help us identify risks at an early stage and continuously improve the security of our products.

Have you discovered a security vulnerability?

security@ziehl.de

Cybersecurity at ZIEHL

Report a Security Vulnerability

Handling Reported Security Vulnerabilities

Working Together for Secure Products

Zetty