Security & trust at Swegon
What is here
Swegon makes connected products for buildings and runs the services around them, and is responsible for securing them for as long as they are supported. This site publishes how Swegon works with security, what each product provides and what it needs from its environment, the security requirements Swegon puts to its suppliers, and advisories when a vulnerability needs action. When a vulnerability in a released product needs customer action, Swegon publishes an advisory here and in the channels where the product's software and documentation are published. Where an incident or an actively exploited vulnerability could affect customers, Swegon also informs directly the customers it can identify.
Security of a connected building is shared, and the line moves with how the equipment is connected: the more of the connectivity Swegon provides, the more Swegon carries. What that means on each side is set out under securing your installation.
Find what you need
Securing your installation
For building owners and operators, and for the installers and integrators who deploy Swegon equipment: who does what, and the checklist. The guide explains each item.
Product & service security
The architecture, interfaces, ports, defaults, connectivity and assessment or certification evidence of a specific product or service.
- Swegon GOLD Security & Trust Overview
- Swegon INSIDE Security & Trust Overview
- For other products, start with the product's documentation or ask the Swegon sales representative.
Security advisories
When a vulnerability in a released product needs customer action, Swegon publishes an advisory. A notice covers a risk in how equipment is installed or exposed, across products.
Report a vulnerability
Found a vulnerability in a Swegon product or service? Report it under the Swegon Vulnerability Disclosure Policy. Swegon also runs scoped, invitation-based security testing of selected systems.
Evaluating Swegon as a supplier
For procurement and compliance: how Swegon governs security, which standards and regulations it works to, and how to request evidence.
- How Swegon works with security
- Swegon Security & Trust Overview
- Swegon Information Security Policy
- Security Assurance Summary, aligned with ISO/IEC 27001 with the Annex A control mapping: under NDA, through the Swegon sales representative
Supplying to Swegon
For those who deliver products, components, software or services to Swegon: the security requirements Swegon puts to its suppliers and service providers.
- Security Requirements for IT Service Providers, for every supplier and service provider
- Security Requirements for IT Solutions, for those who develop IT solutions and digital services for Swegon
- Security Requirements for Products with Digital Elements, for those who develop or manufacture products Swegon places on the market
- Security Requirements for OT/ICS, for suppliers of production and facility systems
Contact
A security incident involving a Swegon product or service: security@swegon.com. A product-specific question: the Swegon company or partner the product was bought from. Other security questions and documentation requests: the Swegon sales representative. How Swegon handles personal data: the Swegon privacy policy.
Find what you need
This page describes Swegon's security work in general. For a specific product or service, its own documentation, its Security & Trust Overview where published, and Swegon's advisories take precedence.
Last reviewed 6 November 2026.