Report a Security Vulnerability

At PicoQuant, we take the security of our products with digital elements seriously. If you believe you have discovered a security vulnerability in one of our products, firmware, or software, we encourage you to report it to us so we can investigate and resolve it responsibly.

This page serves as our single point of contact for vulnerability reports, in line with our coordinated vulnerability disclosure (CVD) policy and the requirements of the EU Cyber Resilience Act. When reporting, please include as much detail as possible: the affected product and version, a description of the issue, its potential impact, and steps to reproduce it, so we can assess and address it as quickly as possible.

We will acknowledge receipt of your report promptly, investigate it in good faith, and keep you informed of our progress. Once a fix or mitigation is available, we will work with you to coordinate public disclosure. We ask that you do not disclose the vulnerability publicly before we have had a reasonable opportunity to address it. Reports submitted in good faith and in accordance with this policy will not result in legal action against the reporter.

You can reach us using the form below, or directly by email at psirt@picoquant.com. If you would prefer another way to get in touch, please let us know and we will accommodate it.