From 30e52143589ac3d8d4ad0efd9ddd1412053921d1 Mon Sep 17 00:00:00 2001 From: Raphael Michel Date: Thu, 29 May 2025 10:46:32 +0200 Subject: [PATCH] Update SECURITY.md --- SECURITY.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index eef106cd13..5e77ac9bb8 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,11 +2,11 @@ ## Reporting a vulnerability -If you discover a vulnerability with our software or server systems, please report it to us in private. Do not to attempt to harm our users, customer's data or our system's availability when looking for vulneratbilities. +If you discover a vulnerability with our software or server systems, please report it to us in private. Do not to attempt to harm our users, customer's data or our system's availability when looking for vulnerabilities. Please contact us at security@pretix.eu with full details and steps to reproduce and allow reasonable time for us to resolve the issue before publishing your findings. If you wish to encrypt your email, you can find our GPG key [here](https://pretix.eu/.well-known/security@pretix.eu.asc). -We're not large enough to run a formal bug bounty program, but if you find a serious vulnerability in our service, we will find a way to show our gratitude. +Please also see our [Responsible disclosure policy](https://docs.pretix.eu/trust/security/disclosure/). ## Version support @@ -18,3 +18,5 @@ subscribe to our [newsletter](https://pretix.eu/about/en/blog/) in the "News abo category, we will also send you an email on security issues. Past security issues are listed [on our website](https://pretix.eu/about/en/security). + +Please also see our [Release cycle](https://docs.pretix.eu/trust/lifecycle/release-cycle/) documentation.