Vulnerability Reporting

Jinko ESS has established a vulnerability disclosure and handling process. We encourage security researchers, industry organisations, customers and suppliers to report suspected vulnerabilities in Jinko ESS products to the Jinko ESS PSIRT. If you discover a vulnerability, please email the details to psirt_jinkoess.com (replace "_" with "@" when sending). The report should include a description, product model, software version and your contact information. We will analyse and respond to your report as soon as possible.

Typically, we will send an acknowledgement within 1 working day of submission, and complete verification and provide feedback within 7 working days. We will keep you updated on progress throughout the handling process.

During the entire process, Jinko ESS PSIRT will strictly limit the disclosure of vulnerability information to personnel directly involved in handling it. We also ask that reporters keep the vulnerability confidential until our customers have received a full solution. We will take necessary and reasonable measures to protect the data we collect, in accordance with legal and compliance requirements. Unless required by law or affected customers, we will not proactively share or disclose the above data to other parties.