Cybersecurity at fpt robotics

FPT Robotics takes the safety of its products and services very seriously.

Despite careful protective measures, security vulnerabilities or suspicious events cannot be ruled out. Therefore, we provide customers, suppliers, security experts, and other external parties with a central reporting channel.

Please send your information to:

cybersecurity@fpt.de

What information do we need?

So that we can investigate a report quickly and effectively, your message should ideally contain the following information:

a brief description of the observation
the affected product, system, plant, or software component
if applicable, the version or configuration used
Date and time of determination
a description of how the behavior can be reproduced
potential impacts on systems, data, production, facilities, or personnel
existing evidence such as screenshots, logs, or error messages
Your contact details for any queries

Please submit no passwords, access credentials, private keys, or other confidential authentication information by e-mail. Please let us know in advance if larger files, sensitive information, or confidential customer data may be required for the review. We will then coordinate a suitable transmission method with you.

What happens after your report?

Incoming reports are recorded, reviewed, and evaluated within our information security process according to their potential impact.

Depending on the report, we involve the relevant departments and coordinate necessary measures. This may include, in particular, IT, software development, plant and product safety, and management.

If you have any questions or if further information is needed, we will contact you using the provided contact details.

Please do not publish information about a potential security vulnerability while the investigation is ongoing and appropriate protective measures have not yet been implemented. This helps prevent risks to customers, facilities, systems, and data.

Joint cybersecurity

We welcome your information to improve the security of our products and systems. Please note:

Do not perform any actions that could damage or alter systems, equipment, or data.
Do not access data that is not necessary to prove a security vulnerability.
Do not download any third-party or personal data.
Do not interrupt running systems, plants, or production processes.
Do not further exploit identified security vulnerabilities.
Observe statutory, contractual, and customer-specific requirements.

A notification via this communication channel does not constitute authorization for security audits, attacks, penetration testing, or access to systems of fpt robotics or our customers.

Our standard

With the central reporting channel, we support the rapid, traceable, and coordinated processing of potential security incidents and vulnerabilities. The reporting channel is a component of our cybersecurity strategy and our information security management.

Our goal is to identify risks at an early stage, address them appropriately, and continuously improve the security of our products, facilities, systems, and information.