Product Security Management at Bruker
At Bruker, we are committed to innovation with integrity and to maintaining the trust of our customers, partners, and society.
The security and quality of our products are essential to meeting our own high standards and the expectations of our customers.
Bruker has established dedicated product security and incident response functions. These functions ensure the continuous monitoring, assessment, and responsible handling of cybersecurity-related reports across our products, solutions, and services. We are committed to addressing security issues in a timely and transparent manner and to providing relevant information to our customers as appropriate.
If you become aware of a potential security vulnerability or a security-related incident associated with a Bruker product or solution, we encourage you to report it through our designated reporting channel. Your information helps us improve the security, reliability, and integrity of our products throughout their lifecycle.
Bruker will not pursue legal action against security researchers who act in good faith and responsibly report vulnerabilities through Bruker’s designated reporting channels.
Security Advisories and User Information
At Bruker, we are committed to innovation with integrity and to maintaining the trust of our customers and partners. Transparency and responsible communication are essential parts of how we handle cybersecurity risks.
In accordance with the EU Cyber Resilience Act, Bruker informs affected users—and, where appropriate, all users about actively exploited vulnerabilities or severe cybersecurity incidents related to Bruker products with digital elements.
When such a situation occurs, Bruker provides Security Advisories to ensure that users receive clear, relevant, and actionable information. These advisories are intended to help users understand the issue and take appropriate measures to protect their systems and operations.
A Security Advisory may include:
- A description of the identified vulnerability or incident
- The affected Bruker products or product versions
- The potential impact or risk
- Recommended mitigation measures or security updates (if available)
Security Advisories are part of our commitment to responsible disclosure and to supporting our users throughout the product lifecycle.
Reporting Potential Security Vulnerabilities
We encourage you to report any potential security vulnerability or security‑related incident related to a Bruker product or solution that you believe may pose a risk. All information you submit is handled responsibly and treated with appropriate care and confidentiality.
To ensure your report is received and reviewed efficiently, Bruker provides a dedicated reporting channel for cybersecurity and vulnerability reports. This allows direct communication with our product security experts via the reporting form below.
Vulnerability Reporting Form
If you become aware of a potential cybersecurity vulnerability affecting a Bruker product, solution, or service, please report it to our Product Security Incident Response Team (PSIRT) by using the form below.
To help us review and investigate your submission efficiently and responsibly, please provide as much of the following information as possible:
- The affected Bruker product, solution, or system
- Product, software, firmware, or hardware version (if known)
- A description of the vulnerability and its potential impact
- Steps required to reproduce the issue, if applicable
- Relevant supporting information such as screenshots, logs, or proof-of-concept examples
- Date and time of discovery (if known)
- Your contact details, if you would like us to follow up with you
You may also submit vulnerability reports anonymously by leaving the contact information fields blank.
Data Protection and Privacy
Bruker is committed to protecting personal data and handling all information responsibly and in compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).
If you become aware of a potential cybersecurity vulnerability affecting a Bruker product, solution, or service, please report it to our Product Security Incident Response Team (PSIRT) by email at psirt@bruker.com or by using the form.
Any personal data provided when reporting cybersecurity vulnerabilities or security‑related incidents is processed solely for the purpose of reviewing, investigating, and addressing the reported issue. Information is handled confidentially and protected by appropriate technical and organizational measures.