Targus actively encourages customers, vendors, independent researchers, and security organizations to report any potential vulnerabilities to our security team. In addition to reviewing submitted reports, Targus proactively monitors the broader security community, vulnerability repositories, and industry security websites to identify risks as early as possible.
When a vulnerability is reported, our process includes:
- Awareness and Receipt: Targus’s security team reviews all reports as soon as they are received. We aim to acknowledge receipt of your report within 15 business days.
- Verification: Together with our product team, we carry out a thorough preliminary analysis and validation to determine the validity, severity, and potential impact of the vulnerability. We may reach out to the reporter to request additional details, if needed.
- Remediation: Once a vulnerability is confirmed, Targus develops and implements an appropriate remediation plan. Most issues are addressed within 90 days, though particularly complex cases may require extra time. We provide ongoing updates as progress is made.
- Notification: Targus will issue a security advisory when one or more of the following conditions are met:
- The vulnerability is rated CRITICAL by the Targus security team and we have completed our response process, with effective mitigation or solutions available for customers.
- The vulnerability has been actively exploited or is likely to increase security risk or public concern for Targus customers. In such cases, Targus will expedite the release of a security bulletin, which may include a full firmware patch or an emergency fix.