How We Respond
The Hai Product Security Incident Response Team (PSIRT) coordinates product and system information security issues from development through deployment.
We follow recognized industry security practices and responsible disclosure principles, and work with customers, partners, and security researchers to identify and address risks.
From Detection to Disclosure
Reports reach us from customers, researchers, and our own monitoring. Whatever the source, they move through the same four stages.
1. Detection
Issues surface through global user reports, round-the-clock system monitoring, and internal security review. Our security team acknowledges every incoming report and completes an initial assessment within 24 hours.
2. Assessment
Issues are scored against industry frameworks including CVSS, then weighed against real deployment context: actual impact, affected scope, and remediation priority.
3. Remediation
Confirmed issues are fixed or mitigated, and the fix is revalidated to confirm the risk is closed rather than moved.
4. Communication
Advisories carry the update, the remediation status, and the recommended action.
How We Prioritize
- Priority Response. High-severity issues are escalated ahead of the queue and investigated immediately.
- Contained Impact. Remediation is designed to close the risk while keeping disruption to running operations as low as possible.
- Responsible Collaboration. We protect the privacy of anyone who reports an issue and support coordinated disclosure.
Information Security Advisories
Hai publishes advisories covering vulnerability fixes, system improvements and risk notifications, so you can confirm whether your deployment is affected and what action to take.
No advisories have been issued to date. New advisories are published here as they are released.
Report an Information Security Issue
If you have identified a potential vulnerability, abnormal system behavior, or another information security concern involving Hai products or systems, report it here. Every report is reviewed and assessed through the process above, and we acknowledge receipt within 24 hours.
You can also report directly to swsecurity@hairobotics.com