If you suspect vulnerabilities in our software products, report them to us in compliance with these instructions.
For direct customers, resellers and partners:
- Write that you suspect a vulnerability in a Genius Bytes Software product as an email to security@geniusbytes.com
- Do not include any further information about the suspected vulnerability in the subject or body of the email. Please only include a request for Genius Bytes to contact you to exchange information about a potential vulnerability. We will then get back to you to exchange all required information using protected ways of communication.
- In order for us to contact you, we need your contact details – please make sure that contact person, company and phone number are mentioned in the email.
For resellers and partners:
- Provide your customers and partners with instructions and processes for confidential submission of vulnerability reports. You can then forward the information to us in accordance with the instructions for direct customers, resellers and partners.
- Never transmit such information unencrypted (i.e. simply by email) and please treat the information confidentially.
Why a confidential report?
If vulnerabilities in software products become known, this can lead to hackers first becoming aware of attack possibilities. Therefore, such information should not be made public until the vulnerabilities have been fixed and customers, resellers and partners have had the opportunity to install new software versions.
How does Genius Bytes deal with vulnerability reports?
Our teams follow a defined process to analyze, assess and decide either to fix or accept the vulnerabilities. Genius Bytes employees get in touch with the contact person named in the vulnerability report to exchange further information. Our employees have experience in communicating with companies that carry out penetration tests on behalf of customers. Communication can take place in either German or English.
DE 
EN