Tomcat vulnerabilities (Winter 2024)

From 11th September 2026, anyone — you, your customers, or independent security researchers — can report a suspected vulnerability in a Y Soft product directly to us. It's part of our response to the EU Cyber Resilience Act (CRA), in force since 11th September 2026: Y Soft must now report actively exploited vulnerabilities to ENISA within 24 hours, and file a full report within 72. We built the process to meet that deadline — and opened it to everyone, not just regulators.

YSoft SAFEQ Cloud attains SOC 2 Type II certification, confirming its internal security controls meet AICPA standards and are robust, consistently effective, and proven in real-world operation. TEXT: