Security

Reporting a Vulnerability

If you believe you have identified a potential security vulnerability in one of our products, you may full out our reporting form or contact us at: security@koenig-pa.de

To help us investigate the issue, please include as much of the following information as possible:

• Product name and exact version
• Description of the vulnerability
• Steps required to reproduce the issue
• Potential security impact
• Relevant logs, configuration details, crash dumps, or proof-of-concept information
• Your contact details, if you would like us to provide updates

Please do not publicly disclose the vulnerability before we have had a reasonable opportunity to investigate it and coordinate the disclosure process.

For further information, please refer to our Vulnerability Disclosure Policy.

Vulnerability Handling Process

We handle vulnerability reports in accordance with our Coordinated Vulnerability Disclosure process.

After receiving a report, we will:

1. Acknowledge receipt.
2. Investigate and validate the reported issue.
3. Assess its severity and potential impact on affected products and users.
4. Develop a security update or recommend appropriate mitigation measures.
5. Keep the reporter informed of significant progress, where appropriate.
6. Coordinate disclosure and customer notification as necessary.

Where applicable, we fulfil the vulnerability reporting and user notification obligations established by the EU Cyber Resilience Act and other applicable legislation.