Report a vulnerability

We take the security of our devices as seriously as their metrological accuracy. If you have found a vulnerability (security weakness) in an Intergaz product, please report it directly to us.

How to report

Please send reports to: cyber@intergaz.eu. We accept reports in English or Polish.

This address is for vulnerability reports only. For sales inquiries, service and complaints, please use our Contact page.

Products in scope

This channel covers Intergaz products that contain software or digital communication, in particular IGAZ gas meters in versions with an electronic index and a communication module (remote reading), including their software.

What to include

• product name and type, and the software (firmware) version if known,
• a description of the vulnerability and the steps to reproduce it,
• its potential impact,
• whether you know it to be actively exploited,
• your contact details, and whether you would like to be credited when a fix is published.

What you can expect

• acknowledgement of your report within 5 working days,
• an assessment by our team and information about next steps,
• a fix, followed by coordinated disclosure agreed with you once the vulnerability has been resolved,
• confidential handling of your report and your personal data.

Good-faith research

We will not take legal action against anyone who reports a vulnerability in good faith, that is, who:

• reports it promptly after discovering it,
• does not exploit it beyond what is necessary to demonstrate it,
• does not violate the privacy or data of others,
• does not test devices installed at customer sites or in the gas network without the owner’s consent,
• gives us reasonable time to fix it before any public disclosure.

We operate this vulnerability reporting channel in line with Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements (Cyber Resilience Act). Machine-readable contact: security.txt.