Report-vulnerability

Coordinated Vulnerability Disclosure (CVD) policy in accordance with the EU Cyber Resilience Act (Regulation (EU) 2024/2847).

Have you found a security vulnerability in an AMT product or system? We appreciate your report and will treat it confidentially. Please send a description of the vulnerability, including reproduction steps and the potential impact, to: security@amtgroup.nl. We will acknowledge your report within 3 working days and aim for a resolution within 90 days. Researchers acting in good faith are protected by AMT (safe harbor). Read our full CVD policy for details. This policy applies to products from AMT Rail Road Production BV. For vulnerabilities in Zagro or Neotec products, we will forward your report to the respective manufacturer.