Responsible Disclosure

Report vulnerabilities responsibly.

Process

1. Document fully
2. Contact vendor
3. Wait for patch (90 days standard)
4. Public disclosure

BSI as Coordinator

📧 [email protected]

See Legal Framework for details.