Security Vulnerability Reporting

Security

ProTrack AU Security Vulnerability Disclosure Policy

At ProTrack AU, we take the security of our products and services seriously. We welcome reports from security researchers, customers and members of the public who believe they have identified a security vulnerability affecting a ProTrack product, application or service.

Reporting a Security Vulnerability

If you believe you have discovered a security vulnerability, please report it to:

Email: security@protrack.au

Please include as much information as possible, including:

• Product name and tracker model
• Firmware version and device IMEI number (if known)
• Description of the vulnerability
• Steps required to reproduce the issue
• Screenshots, logs or supporting evidence (if available)
• Your contact details

Our Commitment

When a vulnerability report is received, ProTrack AU will:

• Acknowledge receipt of the report within 5 business days.
• Review and assess the reported issue.
• Investigate and verify the vulnerability where possible.
• Keep the reporter informed of progress where appropriate.
• Work to resolve verified security issues within a reasonable timeframe.

Responsible Disclosure

We request that researchers and reporters:

• Act in good faith.
• Do not exploit vulnerabilities beyond what is necessary to demonstrate their existence.
• Do not access, modify or delete customer data.
• Do not disrupt services, systems or devices.
• Allow reasonable time for investigation and remediation before public disclosure.

Security Updates

Where a verified security vulnerability is identified, ProTrack AU may provide security updates, firmware updates or other remediation measures where appropriate.

Scope

This policy applies to:

• ProTrack AU GPS tracking devices
• ProTrack AU mobile application
• ProTrack AU websites and online services, including login.protrack.au

Contact

For all security-related matters, please contact:

security@protrack.au

Last Updated: October 2026