Please see Axis Vulnerability Management Policy for details on scope, commitment, vulnerability management, reporting vulnerabilities, disclosing vulnerabilities, out-of-scope vulnerabilities and security notifcation service.