# Responsible vulnerability disclosure

> How to report a vulnerability in an Ironchip product or service and what commitments Ironchip makes to the people who report one.

URL: https://docs.ironchip.com/en/seguridad/divulgacion-responsable/

If you have found a vulnerability in an Ironchip product or service, please report it to us responsibly. This page explains how to do it and what you can expect from Ironchip.

## How to report a vulnerability

1. Write to [security@ironchip.com](mailto:security@ironchip.com).
2. Include the details needed to reproduce it.

We publish our `security.txt` at [www.ironchip.com/.well-known/security.txt](https://www.ironchip.com/.well-known/security.txt). For any other inquiry, use the general contact: [info@ironchip.com](mailto:info@ironchip.com).

## What Ironchip commits to

- The CISO responds within 24 to 48 hours.
- The CPO directly handles critical component bugs, with proactive notification to the customer.

Certifications and other security questions are covered in [Security and compliance](https://docs.ironchip.com/en/seguridad/).