Security updates and support

Support period

ROCOON OG provides security support for IOZER basic hardware revision 1.0.x until at least December 2031. If this hardware revision continues to be sold beyond December 2026, the support end date will be extended so that security support remains available for at least five years after sales end. The binding end date will be published on this page and will not be shortened retrospectively.

Handling vulnerabilities

During the support period, we assess known vulnerabilities relevant to IOZER basic based on risk. Required measures are provided without undue delay as security updates or as suitable technical and organizational risk mitigations.

Security-related information can be reported to support@iozer.pro.

Technical limitations and compensating measures

In exceptional cases, a complete fix through a firmware update may be limited by technical constraints of the hardware, bootloader, or embedded components. In such cases, we implement suitable compensating measures, for example:

• Restricting or disabling an affected network service or protocol
• Secure configuration requirements or mandatory network segmentation
• Server-side blocking of a device certificate or affected online function
• Providing security-optimized firmware in which non-essential functions may be removed

Information and further corrective action

Affected users will be informed about the vulnerability, its potential impact, and required protective measures. If a relevant residual risk cannot be reduced sufficiently, further corrective measures will be defined based on its severity and scope. These may include permanent deactivation of a function, replacement, withdrawal, or recall.

Scope of the support commitment

The security support commitment means that relevant vulnerabilities will be addressed during the specified period. It does not guarantee that every original function will remain unchanged or that the product will be completely free of security risks. Functions may be restricted where necessary to maintain an acceptable level of security.