Coordinated vulnerability disclosure policy

Policy · NIS2 Art. 21(2)(e) Secure acquisition, development and maintenance; vulnerability handling and disclosure · owner Jonas Weber · Next review 2027-03-23

Versions

every version is kept
VersionIn force fromApproved byFile
v1.1 in force Adds the 72-hour triage target and the security.txt contact. 2026-03-23 CTOuploaded by ines.brandt@kestrel.example coordinated-vulnerability-disclosure-policy-1.1.pdf sha256 9e0d3bd83d0aeaf3…
v1.0 superseded First version. 2025-10-09 CTOuploaded by ines.brandt@kestrel.example coordinated-vulnerability-disclosure-policy-1.0.pdf sha256 c7607aebc9f9a633…

Add a version

Details

×
Live demo — signed in as the admin, sample data resets hourly.
Own it — one payment →