Vulnerability Response Process

The Sungrow North America Product Security Incident Response Team (US PSIRT) is part of Sungrow's global product security program and is responsible for managing security vulnerability reporting and coordination for Sungrow products and services deployed in North America.

US PSIRT works closely with Sungrow's global PSIRT and product engineering teams to receive, analyze, validate, and remediate reported vulnerabilities. The team serves as the primary point of contact for security researchers, customers, and partners reporting potential security issues affecting Sungrow products in the North American market.

To report a suspected vulnerability related to Sungrow products or services in North America, please contact us-psirt@sungrow-na.com.

After receiving any suspected vulnerability, our PSIRT will work with the relevant product team to analyze/validate the vulnerability, assess its severity based on its actual impact on products, determine its remediation priority, and develop remediations (including mitigations, patches/versions, and other risk mitigations that can be implemented by customers). 

When discovering vulnerabilities in the products or services provided by a supplier during product development, delivery, and deployment, we will proactively contact the supplier for vulnerability remediation.