Cyber Resilience Act Reporting
Adam is committed to maintaining the security of our products and protecting our customers.
In accordance with the EU Cyber Resilience Act (CRA) Regulation (EU) 2024/2847, Adam is providing a dedicated reporting channel for potential cybersecurity vulnerabilities or security incidents relating to our products with digital elements.
The CRA obligations described on this page apply only to Adam products with digital elements placed on the European Union market and within the scope of the Regulation. Reports concerning other Adam products may still be submitted through this channel, but this does not indicate that those products are within the scope of, or compliant with, the CRA.
What should you report?
You may report any suspected cybersecurity vulnerability or security incident affecting an Adam product. Under the CRA, Adam is required to notify the relevant authorities of certain actively exploited vulnerabilities and severe security incidents. You do not need to determine whether this reporting threshold has been met before contacting us.
Examples include:
- Unauthorised access to a device, its data, or its communication link
- Evidence a vulnerability is being, or has been, exploited
- Malicious code, tampering, or unexpected security-related behaviour
- A flaw that could let data be read, altered, or disrupted
If you believe you have discovered a cybersecurity vulnerability affecting an Adam product, please report it to us so our team can investigate and take appropriate action.
Report a Security Vulnerability
To report a suspected security vulnerability, please complete the form below. Please note that this form is not for general bugs or feature requests; for those issues, please contact Technical Support.