For technical documentation about Solace security features
Product Security – PubSub+ Brokers
Security Updates and Patching
Solace follows industry standard practice to monitor, test, and remedy vulnerabilities for the PubSub+ family of products. Critical and high-level vulnerabilities are addressed in a release within 30 days of availability of an industry-accepted remedy. Other vulnerabilities will be fixed in all subsequent Production releases. Solace publishes critical vulnerability notifications, which are posted on the Security Vulnerability page.