Please wait 90 days before you publish the vulnerability or pass it on to other parties. This will give us enough time to investigate and fix the problem.
You need not fear prosecution if you report a security vulnerability. We will treat your information confidentially and ensure that your report is processed securely.
No additional obligations arise from the notification. You do not have to sign any NDAs or other agreements.
At Janitza, we are committed to working closely with you to continuously improve the security of our products, solutions and services. If you discover any potential security vulnerabilities, please let us know by e-mail. Regardless of whether you are already a Janitza customer or not, we would be grateful for your information.
No non-disclosure agreement (NDA) or other contract is required to co-operate in the disclosure of security vulnerabilities. Our goal is to work professionally and transparently with those reporting vulnerabilities to address potential security risks as quickly as possible to ensure the security of our products and solutions.
To ensure that your report is processed quickly, please provide the following information in your email:
Thank you for your support and co-operation in improving the security of our products and solutions.
Please send your e-mail encrypted to the following address: security@janitza.de
To ensure that your message is delivered securely, you can find our PGP public key and fingerprint here:
Fingerprint: AA1A 2841 2C38 CE89 D80D 3A28 AF5C F41D CBB5 9B5D
