generated: '2026-09-16'
method: searched
probe: true
source: https://sequans.com/security/
docs: https://sequans.com/security/
description: >-
  Sequans publishes a Responsible Disclosure Policy on its Quality & Security pages, a
  vulnerability-declaration form, a public GPG key for encrypted reports, and a list of dated
  product security bulletins (SQNSEC-2026-*). It covers Sequans' chip and module products and
  frames vulnerability handling against the EU Cyber Resilience Act timeline (reporting obligations
  from 2026-09-11). There is no security.txt and no bug bounty programme on HackerOne, Bugcrowd or
  Intigriti.
policy:
  name: Sequans Responsible Disclosure Policy
  url: https://sequans.com/security/
  scope: Sequans products and services
reporting:
  channel: web form (reporter enters an email address to receive the submission form)
  url: https://sequans.com/declaring-a-security-vulnerability/
  encryption_key: https://sequans.com/wp-content/uploads/2025/09/sequans_pub_key.gpg
  key_page: https://sequans.com/gpgkey/
  contact_form_department: Cybersecurity (https://sequans.com/contact/)
advisories:
  page: https://sequans.com/support-zone-security-vulnerability/
  bulletins:
  - id: SQNSEC-2026-001
    url: https://sequans.com/wp-content/uploads/2026/09/Security_Bulletin_SQNSEC-2026-001.pdf
  - id: SQNSEC-2026-002
    url: https://sequans.com/wp-content/uploads/2026/09/Security_Bulletin_SQNSEC-2026-002.pdf
  - id: SQNSEC-2026-003
    url: https://sequans.com/wp-content/uploads/2026/09/Security_Bulletin_SQNSEC-2026-003.pdf
  - id: SQNSEC-2026-005
    url: https://sequans.com/wp-content/uploads/2026/09/Security_Bulletin_SQNSEC-2026-005.pdf
  - id: SQNSEC-2026-006
    url: https://sequans.com/wp-content/uploads/2026/09/Security_Bulletin_SQNSEC-2026-006.pdf
  - id: SQNSEC-2026-007
    url: https://sequans.com/wp-content/uploads/2026/09/Security_Bulletin_SQNSEC-2026-007.pdf
  note: SQNSEC-2026-004 is not linked from the advisories page.
bug_bounty: none found
security_txt: https://sequans.com/.well-known/security.txt returns 404
evidence:
- source: https://sequans.com/security/
  kind: disclosure page
  keywords:
  - vulnerability
  - responsible disclosure
  - security issue
- source: https://sequans.com/declaring-a-security-vulnerability/
  kind: reporting form
- source: https://sequans.com/support-zone-security-vulnerability/
  kind: security bulletins
x-evidence:
  fetched: '2026-09-16'
  probes:
  - url: https://sequans.com/security/
    status: 200
  - url: https://sequans.com/declaring-a-security-vulnerability/
    status: 200
  - url: https://sequans.com/support-zone-security-vulnerability/
    status: 200
  - url: https://sequans.com/gpgkey/
    status: 200
  - url: https://sequans.com/wp-content/uploads/2025/09/sequans_pub_key.gpg
    status: 200
  - url: https://sequans.com/.well-known/security.txt
    status: 404