Cyber Resilience Act (CRA)

Product Security & the EU Cyber Resilience Act

With the Cyber Resilience Act (CRA) coming into force in Europe, cybersecurity is becoming a necessity for all digital products, including industrial and embedded systems.

The security of our products is a priority. We are actively preparing for the EU Cyber Resilience Act (Regulation (EU) 2024/2847), which fully applies from 11 December 2027.

At ACE Automation, we anticipate these requirements by incorporating cyber resilience

Already in place

A dedicated channel to report vulnerabilities and security incidents
A process to notify the EU authorities within the required deadlines

In progress

Cybersecurity risk assessment of each product
Vulnerability monitoring and security updates with our team or manufacturing partners
Defined support period for each product
Technical documentation and EU declaration of conformity

Rules for security testing

If you test our products for vulnerabilities, please follow these rules.

Testing
- Test only on products you own or are authorised to test, never on equipment running in a live installation.
- Do only what is necessary to demonstrate the vulnerability.
- Do not cause service disruptions or system malfunctions.
Prohibited methods
- No physical attacks or denial-of-service (DoS/DDoS) attacks.
- No social engineering, phishing, malware installation or password theft.
Data handling
- Access only the information needed to report the issue.
- Do not delete, modify or corrupt any data.
- Do not keep or share confidential data accessed through the vulnerability, and delete it once your report is sent.
Disclosure
- Do not share vulnerability details with third parties until we have fixed the issue or agreed a disclosure date with you.

If you follow these rules in good faith, we will not take legal action against you.

What this form is not for

This form is only for reporting security vulnerabilities and security incidents affecting our products.

Please do not use it to:

Report that our website is unavailable
Report suspicious or phishing emails
Report fraud or payment issues
Request technical support for our products

For these requests, please contact our support team.