DEWETRON Coordinated Vulnerability Disclosure Policy

DEWETRON is committed to maintaining the security of its products and welcomes reports of potential security vulnerabilities from customers, partners and security researchers. This policy applies to DEWETRON products, software, cloud services and websites owned and operated by DEWETRON.

If you believe you have discovered a security vulnerability affecting a DEWETRON product or software component, please report it to security@dewetron.com. To support an efficient assessment, we encourage you to provide a description of the issue, the affected product and version, the potential impact, and any information that may help us reproduce and validate the reported vulnerability.

DEWETRON will acknowledge receipt of vulnerability reports within a reasonable timeframe, may contact the reporting party for additional information where required and where appropriate, investigate the issue further. Confirmed vulnerabilities will be addressed through corrective or mitigating measures in accordance with our product security processes and applicable regulatory obligations.

We ask reporters to act responsibly and in good faith. This includes avoiding actions that could negatively affect customers, compromise third-party data, disrupt services, or unnecessarily expose details of a vulnerability before appropriate mitigations are available. We request that vulnerability details are not publicly disclosed until DEWETRON has had a reasonable opportunity to investigate and implement corrective measures. DEWETRON will make reasonable efforts to coordinate vulnerability disclosure with the reporting party and to communicate relevant information to affected users where necessary.

DEWETRON will not pursue legal action against individuals who, acting in good faith, report security vulnerabilities responsibly, comply with this policy and do not intentionally compromise the confidentiality, integrity or availability of DEWETRON products, systems or customer data.

For all security-related reports and communications, please contact:

DEWETRON GmbH
security@dewetron.com