Security & Vulnerability Disclosure

Last updated: 2026-10-16

Reporting a vulnerability

If you believe you have found a security vulnerability in the WhiteCat router, the WhiteCat app, our backend services or this website, please email [email protected] with “Security” in the subject line. You can write in English, Slovak or German.

Please include what is affected (router firmware build, app version or URL), the steps to reproduce the issue, and the impact you observed.

What we promise

• We confirm receipt within 5 working days.
• We keep you informed while we investigate and fix the issue, and tell you when it is resolved.
• If you wish, we credit you publicly once the fix is available.
• We will not take legal action against security research carried out in good faith under this policy.

Good-faith research

• Only test devices and accounts that you own or are allowed to test.
• Do not access, change or delete other people’s data. If you come across it, stop and tell us.
• Do not disrupt our services: no denial-of-service, spam or social engineering of our staff or customers.
• Give us reasonable time to fix the issue before publishing details. We suggest 90 days.

Security updates

Firmware updates are delivered to WhiteCat routers automatically, and app updates through the App Store and Google Play.

Machine-readable contact: /.well-known/security.txt (RFC 9116).