Vulnerability Reporting Portal
To ensure the highest level of security for our IT and OT systems in corrugated board processing, we consistently implement the requirements of the Cyber Resilience Act (CRA). We provide customers and partners with access to a central and confidential point of contact through which they can report potential security risks directly. Our vulnerability management is handled by a specialised Product Security Incident Response Team (PSIRT).
The team systematically reviews, assesses and processes incoming reports.
A key focus is on transparent communication with all relevant parties. In this way, we ensure that security vulnerabilities are promptly addressed and affected users are informed without any delay.
Which vulnerabilities must be reported?
Security-related vulnerabilities include all errors, defects or inadequate protective measures within the software and hardware products we provide.
These include, in particular, security vulnerabilities that enable unauthorised access to systems, create data risks, disrupt operations or jeopardise the integrity of our control systems.
As soon as a potential vulnerability is discovered that could constitute a breach of fundamental security requirements or pose a risk of exploitation, it should be reported immediately via our central portal.
How do I report a vulnerability?
Have you discovered a potential security vulnerability in one of our products?
Simply send us your report by email.
Contact:
Please send your report to the following email address: : psirt@goepfert.de
To help us analyse and process your report quickly, please provide the following information:
- Your contact details for direct enquiries
- Product details such as serial number, software or firmware version, and affected components (e.g. HMI terminal, controller)
- A description of the risk, including how it might be exploited and, if known, references to any information already published
- Steps to reproduce the issue, ideally accompanied by screenshots or log files
Once we have received your message, you will immediately receive an acknowledgement of receipt. Our security team will then assess the issue straight away.



