A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://www.open-xchange.com/.well-known/security.txt

Expires: 2025-02-27T12:00:00.000Z

Preferred-Languages: en



# Generic security contact

Contact: mailto:security@open-xchange.com

Encryption: https://documentation.open-xchange.com/appsuite/security/security_mail_public.asc



# Bug bounty

# If you would like to report a vulnerability in any of our products, please use the related bug bounty program.

# For reports regarding our infrastructure, website or other organizational assets, please use the VDP.

Contact: https://yeswehack.com/programs/app-suite

Contact: https://yeswehack.com/programs/dovecot

Contact: https://yeswehack.com/programs/powerdns

Contact: https://vdp.open-xchange.com/

Policy: https://vdp.open-xchange.com/



# CSAF publications

CSAF: https://www.open-xchange.com/.well-known/csaf/provider-metadata.json



# Looking for awesome people

Hiring: https://www.open-xchange.com/about-ox/career/working-for-ox/

-----BEGIN PGP SIGNATURE-----
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=XSrw
-----END PGP SIGNATURE-----