Product Security & Response Policy

1. Scope and local role

This policy describes Step Solutions Co., Ltd. reporting channels for website and Horion product security issues related to the company’s services. It is not an update guarantee or a statement from Horion Global. Manufacturer firmware and software fixes depend on the manufacturer and product model.

2. How to report a security issue

Email sales@step-solutions.com with the subject “Security Report — Horion”. Include the product model, firmware or software version, issue description, impact, reproduction steps, and contact details. For website issues, include the affected page address.

Send only necessary evidence, redacting customer information, passwords, tokens, and personal data. Do not submit malware or confidential information through general forms. Contact our team to agree on a method before sending sensitive material.

3. Review and coordination

Our team will review received information, request further details if needed, and coordinate with the relevant manufacturer or provider. Guidance, fixes, and timelines will be shared when confirmed. This page does not guarantee acknowledgment deadlines, patch release dates, or product support periods.

4. Responsible disclosure

Test only devices or systems you own or are authorized to test. Do not access or collect others’ data, disrupt services, or exploit vulnerabilities to cause harm. Coordinate disclosure with affected parties before publishing information that could put users at risk. This policy is not authorization to test systems or a bug bounty program.

5. Reducing operational risks

Use firmware and software from manufacturer-approved sources, set appropriate passwords, restrict administrator access, segment networks where appropriate, and sign out after using shared displays. Back up data before updates or repair and consult our team before applying patches of unknown origin.

6. Personal data in reports

Reporter details and report contents are used as necessary to investigate, respond, and coordinate remediation under the website privacy policy. If you suspect a personal data breach, state that concern without sending further exposed data.