Security vulnerability reporting

At SMART, the security of our products and the privacy of our users’ data are top priorities. We work diligently to resolve security vulnerabilities when they are discovered.

If you believe you have discovered a security vulnerability in any of our products or services, we encourage you to report it to us as soon as possible at productsecurity@smarttech.com. These submissions are voluntary, and no monetary rewards, bounties, or other forms of transfer of value will be provided. Do not include any personal information when reporting a security vulnerability.

When reporting a product security vulnerability, please include the following information:

  • Name and version of the affected product or software
  • Technical description of the issue and impact (include a proof of concept if possible)
  • How to reproduce the issue
  • How you discovered the vulnerability
  • Public disclosure plans

Upon receipt of your report, SMART aims to provide a response within 3 business days and may contact you for further information. SMART will initiate its processes to investigate the issue, develop or source fixes as applicable and appropriate, and then provide these fixes to SMART's customers once they are ready, along with detailed information about the updates. SMART does not disclose security vulnerabilities before they become public or embargoes are lifted.

Report a security vulnerability