Vulnerability Disclosure Policy

CX-Networks GmbH takes the security of our systems seriously. If you have discovered a security vulnerability, we appreciate your help in disclosing it to us responsibly.

Scope

This policy applies to security issues found in:

• The cx-networks.com website and its subdomains
• Software and services we operate and control

The following are out of scope:

• Denial-of-service (DoS/DDoS) attacks
• Social engineering or phishing of our staff or customers
• Third-party services, products or websites not operated by us

How to report

Please report suspected vulnerabilities by email to: info@cx-networks.com

To help us triage and respond quickly, please include:

• A description of the vulnerability and its potential impact
• Steps to reproduce, including any proof-of-concept code or screenshots
• The URL, product or system affected

What to expect

• We will acknowledge receipt of your report within 5 business days
• We will investigate and keep you informed of our progress
• We will notify you once the issue has been resolved

Safe harbor

We will not pursue legal action against researchers who report vulnerabilities in good faith, in accordance with this policy, and who do not access, modify or delete data beyond what is necessary to demonstrate the issue.

Please give us a reasonable amount of time to investigate and fix an issue before disclosing it publicly.

Data protection

Personal data included in your report is processed in line with our Privacy Policy