Security
Security is an integral part of how we design and develop software for industrial automation. On this page you can find out how to report a vulnerability to us, the certifications attesting to our processes, and the technical documentation for our products, in line with the requirements of the European Cyber Resilience Act.
Coordinated Vulnerability Disclosure
Axel follows a coordinated disclosure model. Reports are accepted in both Italian and English.
Contact
security@axelsw.it
Include in your report:
- product and exact version
- description and potential impact
- steps to reproduce it, with a sample project if available
- your contact details
Response times
Axel is committed to responding within 2 business days. If the vulnerability is confirmed, Axel is committed to providing a fix based on its severity.
| Severity | CVSS | Fix within |
|---|---|---|
| Critical | ≥ 9.0 | 15 days |
| High | 7.0 – 8.9 | 30 days |
| Medium | 4.0 – 6.9 | 60 days |
| Low | < 4.0 | Next release |
Certifications
ISO 9001:2015
Quality management system. Design and development of software and firmware for industrial automation.IMQ · Cert. no. 0556.2021
Valid until 29/04/2027
PLCopen – IEC 61131-3
LogicLab 6.4.0.0: ST-level compliance, 26 out of 26 data types supported.PLCopen · Reg. no. C-56
Valid until 02/09/2028