What is your PSTI Vulnerability Disclosure Policy

UK PSTI Vulnerability Disclosure Policy

Product Support Policy

We take the security of our customers seriously and therefore commit to working with our partners to provide support for our Internet of Things (IoT) products for at least 2 years from its first commercial launch. Our applicable Wi-Fi connected products are controlled by the iCS2.0Lite application, available on both the Apple Store and Google Play store. Product Updates are made available through the application or upon request to iCS.

PSTI & Default Passwords

iCS products require the setting up of a unique password upon initial configuration.

Vulnerability Disclosure Policy

As a provider of IoT (Internet of Things) products we take security issues very seriously and recognise the importance of privacy and data security. We are committed to working with our partners to address reported security issues and protect users. Whether you’re a user of iCS IoT products, a software developer, or simply a security researcher, you’re an important part of this process.

If you believe you have discovered a vulnerability in an iCS product or a have a security incident to report, please contact our customer service team either by:

1. Calling +44 (0) 1253 547866 and specifically stating that you are calling to report an IoT security concern in reference to the Vulnerability Disclosure Policy
2. Emailing info@intelligentchargingsystems.co.uk with “IoT Vulnerability Disclosure” in the subject line
3. Raising a ticket on our tech support portal with “IoT Vulnerability Disclosure” in the subject line.  https://intelligentchargingsystems.freshdesk.com/support/tickets/new

iCS will take the necessary steps to address the issue internally and with our partners and communicate with you via telephone or email to keep you informed of progress until the vulnerability is resolved and a patch is released. We will acknowledge your report via email or telephone within 2 working days of receiving it. Please note, however, some vulnerabilities are subject to environment or hardware restrictions. Final remediation time will be determined according to the real-world situation.