# DC InfoSec — Vulnerability Disclosure Policy
# https://dc-infosec.de
# Run by Deniz Ceylan, IHK-certified Cybersecurity-Advisor

Contact: mailto:admin@dc-infosec.de
Contact: https://dc-infosec.de/#kontakt
Expires: 2027-12-31T23:59:59.000Z
Preferred-Languages: de, en
Canonical: https://dc-infosec.de/.well-known/security.txt
Policy: https://dc-infosec.de/security-policy

# We welcome responsible disclosure of vulnerabilities.
# Please allow 90 days for remediation before public disclosure.
# We acknowledge contributions on our Security Hall of Fame.
#
# Hall of Fame: https://dc-infosec.de/security-policy#hall-of-fame
# In-scope: all *.dc-infosec.de subdomains
# Out-of-scope: third-party services (Google Analytics, Stripe, etc.)