Coordinated Disclosure Policy

Universal Robots encourages customers, security researchers, and other interested parties to responsibly disclose discovered security vulnerabilities or safety concerns in collaboration with us.

For responsible disclosure, please open a support ticket on myUR to contact your local Universal Robots Technical Support representative. The issue will then be forwarded to the Product Security team or the Product Safety team. If you do not have a myUR account, you can register your robot for free at http://myur.universal-robots.com. The submissions will be reviewed. A response is typically within five business days.

Please note that Universal Robots does not offer rewards for disclosed vulnerabilities. However, we do provide full attribution to the parties who discovered the vulnerability, if so desired.

We are committed to the safety and security of our users worldwide. Universal Robots reserves the right to withhold disclosure of a received cybersecurity vulnerability if we believe it would expose our users to excessive risk. In such cases, we will work with the reporting party to establish a timeline for disclosure that will be beneficial to our customers and the general public.

When performing security assessments, always adhere to applicable local laws and regulations and consider the safety, security, and privacy of affected individuals at all times. Only perform security assessments on systems that you either own or have permission to assess. Do not perform security assessments on systems owned by Universal Robots without prior express written consent from Universal Robots.