ULVAC PSIRT (ULVAC Product Security Incident Response Team) is the team responsible for addressing potential security issues (both incidents and vulnerabilities) in ULVAC Group products. The ULVAC Group works proactively to resolve such concerns and strives to deliver safe, highly reliable products to all our stakeholders. As part of this commitment, we have established a dedicated point of contact for security-related inquiries concerning ULVAC Group products.
When ULVAC PSIRT identifies a security vulnerability that may affect ULVAC Group products, we disclose the relevant information based on the principle of Coordinated Vulnerability Disclosure (CVD), so that customers can trust in the security of our products.
To help our customers use our products and services with confidence, ULVAC, Inc. and its group companies (the "ULVAC Group") collect and assess vulnerability information for ULVAC Group products and services in accordance with this Policy. When a vulnerability is confirmed, we disclose the relevant information and remediation measures as appropriate.
This Policy applies to all products and services designed, manufactured, sold, or provided by the ULVAC Group (the "ULVAC Products") that fall within the support period defined by the ULVAC Group.
A "vulnerability," as used in this Policy, refers to a security flaw resulting from a defect or design issue in a software program released by the ULVAC Group. Flaws attributable to software programs modified by parties other than the ULVAC Group are outside the scope of this Policy.
Physical damage, deterioration, or defects in ULVAC Products themselves are also excluded.
To strengthen product security, the ULVAC Group gathers information on vulnerabilities in ULVAC Products from both internal and external sources.
If you discover a vulnerability in a ULVAC Product, please contact ULVAC PSIRT (Product Security Incident Response Team) by email.
Email: psirt@ml.ulvac.com (supported in Japanese and English)
・To receive your information and vulnerability reports securely, we ask that you encrypt your communication using PGP. For details, please see "Reporting Vulnerabilities to ULVAC PSIRT" below.
・As a rule, we will contact you within five business days of receiving your report.
・When reporting, please do not conduct attacks against products or systems operated by the ULVAC Group or third parties, disrupt services (e.g., DoS attacks), or gain unauthorized access to third-party data.
・Regardless of the content of your report, the ULVAC Group does not offer any reward or compensation for submitting a report.
・The vulnerability information we collect will be shared with relevant parties within the ULVAC Group, including our product divisions.
・Any personal information you provide will be handled in accordance with our Privacy Policy.
We promptly share reported vulnerabilities with the relevant ULVAC Group divisions and begin our investigation. If the investigation confirms a new vulnerability in a ULVAC Product, we conduct a risk assessment using technical analysis, the Common Vulnerability Scoring System (CVSS), and other methods. When we determine that risk mitigation is necessary, we prepare corrective measures, such as remediation procedures, patches, or workarounds. Throughout this process, we handle vulnerability information and remediation methods appropriately, in line with the ULVAC Group's internal procedures.
Guided by the "Information Security Early Warning Partnership Guidelines" issued by the Innovation Platform Agency, Japan (IPA) and the JPCERT Coordination Center, we coordinate with internal and external stakeholders and, where necessary, publish alerts and remediation measures on our website. As a rule, we disclose this information once our response is fully prepared.
We may review and revise this Policy as necessary.
In line with the policy above, the ULVAC Group remains committed to providing safe products and services.
Established: September 1, 2026
You can report potential security vulnerabilities in ULVAC Group products and services directly to ULVAC PSIRT.
Email: psirt@ml.ulvac.com
When you contact us, please provide the following information:
● Information to include in your report
○ Hardware or software product name, including the version or revision number
○ Description of the vulnerability
○ Potential exploitation scenarios and impact
○ Date the vulnerability was detected
● Additional details (if available)
○ How the vulnerability was detected or confirmed
・ Environment used for detection and confirmation (software name and version)
・ Related technical information (system configuration, communication logs, etc.)
○ Any publicly available information (CVE, academic papers, etc.)
○ Common Vulnerability Scoring System (CVSS) score
● Your contact information
○ Name
○ Organization or department
○ Email address
○ Phone number
*Please note that we may be unable to respond in some cases, such as when the information provided is insufficient.
Important: Please encrypt your message and any attachments using the ULVAC PSIRT PGP public key. Please also include your own PGP public key so that we can encrypt our reply to you.
| Key ID | 6840 C163 5835 118E |
|---|---|
| Key Type and Length | RSA4096 |
| Fingerprint | D5FD 19CD 8716 55C8 9FDB 0990 6840 C163 5835 118E |
| Public key | Public Key File (ZIP) |
A free OpenPGP implementation is available from GnuPG.
Important: This contact point is intended only for potential vulnerability information related to ULVAC Group products and services. For all other inquiries, please contact your sales representative.
Your contact information will be used solely for the analysis and documentation of potential vulnerability information. Please also refer to our Privacy Policy.
While we do our best to respond promptly, please understand that a reply may take some time in certain cases. We appreciate your cooperation.
We publish security advisories on an ongoing basis under the principle of Coordinated Vulnerability Disclosure (CVD). Please note that these advisories may not cover all vulnerabilities or security-related events.
Documents
There are currently no published security advisories.
| XXXX年XX月XX日 | |
|---|---|
| XXXX年XX月XX日 | |
| XXXX年XX月XX日 |
This website use cookies to obtain and use access data to understand the convenience and usage of customers. If you agree to use cookies, click "I Accept".
[Privacy Policy] [Cookie Policy]