Coordinated Disclosure

We consider the security of our systems and products our priority. But no matter how much effort we put into security, there may still be vulnerabilities that we have missed. If you discover such a vulnerability or want to report a bug, we kindly ask you to inform us, so we can address the issue as quickly as possible.

Please follow these steps for CVD (Coordinated Vulnerability Disclosure):

• Send your findings to secops@fstpn.eu.
• Please provide sufficient information to reproduce the problem, to allow us to be able to work on a resolution as quickly as possible.
• Do not take advantage of the vulnerability or problem you have discovered, for example by downloading more data than necessary to demonstrate the vulnerability or by deleting or modifying data.
• Please do not publish the problem or reveal it to third parties until the issue has been resolved.

We promise:

• We will respond to your report within three (3) business days with our evaluation of the report and an expected resolution date. We will also keep you informed of the progress towards the resolution the problem.
• We will not take any legal action against you if you have followed the instructions outlined here.
• We will treat your report in strict confidence. However, we will name you as the discoverer of the problem in the public information about the reported problem, unless you want us to do otherwise.

We kindly ask you to refrain from conducting randoms scans on our public sites and services.

Thank you for your cooperation and your support.