Security disclosure
BlueMetric OpCo Limited welcomes reports of security vulnerabilities in its platform, devices and services from anyone acting in good faith.
How to report
Use this form. Fields marked (required) must be completed.
What we do
- We acknowledge your report within one working day.
- We give you an update within five working days.
- We keep you informed until the issue is resolved.
- We do not take legal action against good-faith research that avoids privacy violations, data destruction and service disruption.
Scope
- In scope: the BlueMetric OS platform and its APIs, BlueMetric-supplied devices and gateways, and bluemetric.co.uk.
- Out of scope: denial of service, social engineering, physical attacks, and third-party services we do not operate.
Reports are handled by our Information Security Lead at security@bluemetric.co.uk.
Last reviewed: 16 October 2026