Security Policy

Last updated: January 1, 2026

Responsible Security Disclosure

We take security seriously and appreciate responsible disclosure of potential vulnerabilities.

Security Contact Information

Response Time

We will acknowledge receipt of vulnerability reports within 48 hours and provide a detailed response within 7 business days.

Scope

This security policy applies to:

  • Our main website (www.deutschpass-a1.de)
  • All associated subdomains
  • Related online services and APIs

Reporting Guidelines

When reporting security vulnerabilities, please:

  • Provide detailed steps to reproduce the issue
  • Keep vulnerabilities confidential until we've addressed them
  • Avoid disrupting our services or accessing user data
  • Act in good faith and follow responsible disclosure practices

Security Acknowledgments

We recognize and thank security researchers who help us maintain a secure platform. Researchers who responsibly disclose vulnerabilities will be acknowledged on this page (with their permission).

Our Security Commitment

We are committed to maintaining the security and privacy of our users' data. This includes regular security assessments, timely patching of vulnerabilities, and continuous improvement of our security practices.