Security and responsible access.

Report a security concern

If you suspect unauthorized access to a Serious Controls account or identify a potential vulnerability, contact support@seriouscontrols.com. For an existing installation, you can also call (888) 444-1855.

Include the affected service or URL, when you noticed the issue, a description of the behavior and a way to contact you. If possible, provide reproduction steps using a system you are authorized to access. Remove customer information and secrets from screenshots or logs before sharing them.

Do not send passwords, API keys or other access credentials by email. If investigating the issue requires sensitive material, ask our team how to share it appropriately before sending it.

Access your account safely

Use the Serious Controls customer portal for account access. The public website provides product information; it is separate from the portal used for an installation.

• Keep account credentials private and use a unique password.
• Follow your organization’s process for approving access and removing it when responsibilities change.
• Check the destination of sign-in links before entering credentials.
• Notify us promptly if you suspect that an account, credential, device or connected system has been used without authorization.

Account responsibilities and acceptable use are described in our Terms and Conditions.

Plan security around the deployment

An energy or building-controls deployment can involve customer networks, field equipment, gateways, third-party interfaces and software services. Define the boundaries and responsibilities for these connections during project planning.

Topics to bring to a technical review include:

• Access: who needs visibility, who can request changes and who administers the installation.
• Connectivity: the approved network paths, gateways and third-party services involved.
• Credentials: ownership and handling of equipment and integration credentials.
• Operating continuity: local behavior when a connection is unavailable and the process for restoring service.
• Maintenance: responsibility for equipment updates, configuration changes and support contacts.
• Information handling: the data required for the project and any customer retention or access requirements.

Discuss specific security features, contractual requirements and supporting documentation with our team for the proposed configuration. This page is not a statement of certification or a substitute for deployment-specific technical review.

Responsible testing

Contact us before conducting security testing. Testing requires written authorization under our Terms and Conditions. Do not access another customer’s data, disrupt equipment or services, bypass access controls, or perform tests against third-party systems without authorization.

If you encounter information you should not be able to access, stop the investigation and report what you observed without copying or distributing the information.

Privacy and data questions

Our Privacy Policy describes the information we collect, how it may be used and shared, retention considerations and how to contact us about privacy requests. For a project-specific question, identify the service or installation concerned so the team can route your request.

Contact Serious Controls to discuss your requirements.