Skip to main content
Cyber Security
We value the contributions of the security research community.
If you believe you have identified a potential security vulnerability in MUSA-3, we want to know, so we can investigate.
MUSA-cybersecurity

Who to contact

Email us on the email address below, which is revealed after completing the recaptcha. Use our PGP public key to encrypt your message. We would prefer that your message be provided in English.

    What detail to provide

    • Your contact information
    • Technical description of the concern or vulnerability, including:
      • When, where and how it was discovered
      • Which products and at which (clinical) site
      • Whether you were able to access any protected health information or other personally identifiable information. Please do NOT include PHI or other PII about others in your email submission
      • Any additional information you think will be helpful to us, including details on the testing environment and tools used to conduct the testing.
    • Whether you have notified anyone else about the potential vulnerability

    What Microsure will do

    • Within ten business days, Microsure will confirm we have received your submission and give you the name of a contact person.
    • We will notify the appropriate quality, regulatory and cybersecurity responsible personnel who may want to follow up with you to better understand what you’ve found, or to confirm technical details.
    • We will investigate the potential vulnerability.
    • We will conduct a risk analysis to determine appropriate action.
    • Once determined, we will provide you with a summary of our findings.
    • We may publicly acknowledge your contribution to improve the security of our products and services, subject to your agreement.

    Important information

    We ask that you comply with all laws and regulations when conducting your research, and avoid actions that could harm products or people, such as brute force testing, tests on active devices, tests on software in production settings, actions taken to exploit any vulnerability, and actions that result in a change to a product or system after the test is conducted.

     

    By submitting information you agree that your submission will be governed by Microsure’s Privacy Statement and Terms of Use.