RTA | Product Security
Cybersecurity of RTA Products
Information on product cybersecurity, vulnerability reporting and the protection of RTA products used in industrial automation applications.
Report a VulnerabilityOur Commitment to Security
RTA recognizes the importance of cybersecurity for its products and promotes the protection of solutions used in industrial automation applications.
With the increasing adoption of interconnected systems and digital technologies, managing cybersecurity vulnerabilities is essential to product reliability and security throughout the product lifecycle.
RTA pays particular attention to identifying and assessing potential security vulnerabilities, with the aim of determining appropriate actions to reduce risks associated with the use of its products.
This page provides information on how to report potential cybersecurity issues affecting RTA products.
Security Vulnerability Reporting
RTA encourages customers, business partners, system integrators and security researchers to report potential cybersecurity vulnerabilities discovered in its products.
Vulnerability reports help identify potential security issues promptly and support the assessment of possible mitigation or corrective measures.
Information to Include in Your Report
To facilitate technical assessment, please provide the following information, where available:
- Affected product: product name, model and identification code.
- Product version: firmware or software version, if applicable.
- Vulnerability description: details of the issue and the conditions under which it occurs.
- Steps to reproduce: instructions for verifying the vulnerability.
- Potential impact: possible effects on security, availability or product operation.
- Supporting documentation: logs, screenshots or other relevant technical information.
How to Submit a Report
Potential security vulnerabilities can be reported to RTA using the following dedicated email address:
psirt [at] rta.itReplace "[at]" with "@" when using this email address.
Suggested email subject:
Product Security - Vulnerability Report - [Product Code]
Handling Vulnerability Reports
Reports submitted through the dedicated communication channel are intended for the technical assessment of potential security vulnerabilities.
Depending on the characteristics of the reported issue, the assessment may include:
- Reviewing the information received.
- Identifying potentially affected products and product versions.
- Analyzing possible security risks.
- Evaluating potential mitigation or corrective measures.
- Communicating relevant information to affected parties, where appropriate.
The handling process and any subsequent communications depend on the nature of the vulnerability and the technical investigations required.
Responsible Vulnerability Disclosure
RTA encourages responsible communication of potential security vulnerabilities.
To minimize potential risks to product users, individuals submitting vulnerability reports are encouraged to avoid publicly disclosing technical information that could facilitate exploitation before possible mitigation measures have been assessed.
Security testing should only be performed on products and systems for which the necessary authorization has been obtained. Activities that could compromise system operation or availability should be avoided.
Product Security and European Regulations
RTA monitors developments in European cybersecurity requirements for products with digital elements, with particular reference to Regulation (EU) 2024/2847, known as the Cyber Resilience Act (CRA).
The regulation introduces requirements concerning cybersecurity, vulnerability handling and information obligations for products falling within its scope.
RTA assesses these requirements in relation to the characteristics of its products and the responsibilities established by the applicable regulatory framework.