Security

At Morse Micro, we’re committed to building secure, robust wireless solutions. We recognize that strong collaboration with security researchers, customers, and partners is essential to maintaining the trust and safety of our products and ecosystem.

This page is the entry point to Morse Micro’s security resources.

Report a Security Issue

If you believe you have identified a security vulnerability in a Morse Micro product, please see our Security Disclosure Policy for the process to report it confidentially to our Product Security Incident Response Team (PSIRT).

For urgent reports, contact security@morsemicro.com (encrypted with our PGP key is preferred for sensitive information).

Security Advisories

Published advisories detailing security vulnerabilities affecting Morse Micro products, along with affected versions, fixed versions, and mitigation guidance, are available on the Security Advisories page.

Regulatory and Compliance Statements

• PSTI Statement – UK Product Security and Telecommunications Infrastructure Act compliance statement.

• Cyber Resilience Act (CRA) – Morse Micro tracks the EU CRA and engages with module partners on their conformance dossiers. Customers requiring vulnerability handling information for CRA compliance should refer to our Security Disclosure Policy and the Security Advisories Feed.

Coordinated Disclosure and Standards

Morse Micro’s security disclosure process follows international standards:

• ISO/IEC 29147 – Vulnerability disclosure

• ISO/IEC 30111 – Vulnerability handling processes

• FIRST PSIRT Services Framework

CVE identifiers for vulnerabilities in Morse Micro products are assigned by Bugcrowd in their capacity as a CVE Numbering Authority (CNA), operating in coordination with Morse Micro’s PSIRT.

Contact

• PSIRT email: security@morsemicro.com

• PGP key: pgpkey.txt

• Disclosure form: Security Disclosure