MESHLE GmbH · Last updated: 3 November 2026
Where to report
Report possible security vulnerabilities in MESHLE products, the MESHLE App or the MESHLE Cloud confidentially to security@meshle.com. Reports in German or English.
Helpful information: affected product and model, firmware or app version, description of the vulnerability, steps to reproduce, possible impact and your contact details. Do not send personal data of third parties.
Process
- Acknowledgement within 5 working days.
- Assessment: we review the report, assess severity and affected products, and inform you of the result.
- Remediation: we provide a correction without undue delay and keep you informed about progress.
- Publication: once the correction is available, we inform affected customers and publish a notice in the release notes (meshle.com/compliance/releases). On request, we credit you as the reporter.
Please do not publish the vulnerability before a correction is available or a date has been agreed with us.
Rules for testing
- Test only devices and accounts that you own or are authorised to test.
- Do not disrupt the operation of others, do not access other people's data, and do not run denial-of-service tests against the MESHLE Cloud.
- If you follow these rules and act in good faith, MESHLE will not take legal action against you.
Reporting to authorities
MESHLE reports actively exploited vulnerabilities and severe security incidents under Art. 14 of Regulation (EU) 2024/2847 via the ENISA Single Reporting Platform.
Contact
security@meshle.com · Machine-readable: meshle.com/.well-known/security.txt
More information on product security and updates: meshle.com/compliance