Product Security Policy

XB encourages customers, vendors, independent researchers, security organizations, etc. to proactively report any potential vulnerabilities to the security team. At the same time, XB will proactively obtain information about vulnerabilities in XB products from the community, vulnerability repositories and various security websites. In order to be aware of vulnerabilities as soon as they are discovered. XB will respond to vulnerability reports as soon as possible, usually within 7 business days. XB Security will work with the product team to perform a preliminary analysis and validation of the report to determine the validity, severity, and impact of the vulnerability. We may contact you if we need more information about the reported vulnerability.
Once the vulnerability has been identified, we will develop and implement a remediation plan to provide a solution for all affected customers.
Remediation typically takes up to 90 days and in some cases may take longer.
You can keep up to date with our progress and the completion of any remediation activities. XB will issue a security advisory when one or more of the following conditions are met: 1. The severity of the vulnerability is rated CRITICAL by the XB security team and XB has completed the vulnerability response process and sufficient mitigation solutions are available to assist customers in eliminating all security risks.
2. If the vulnerability has been actively exploited and is likely to increase the security risk to XB customers, or if the vulnerability is likely to increase public concern about the security of XB products, XB will expedite the release of a security bulletin about the vulnerability, which may or may not include a full firmware patch or emergency fix.