Report a vulnerability | SCHWARTE JANSKY

Thank you for helping to make Schwarte Jansky products and systems more secure. Your name and email address are optional; anonymous reports are welcome.

HTTPS connection: The connection between your browser and the web server is encrypted in transit.
Confidential handling: Reports go only to the security team and are used only for assessment and remediation.
No attachments: To reduce risk, this initial contact form accepts text only.

Do not submit active secrets. Do not include passwords, private keys, complete personal data sets or production malware. The security team will arrange a secure exchange channel if needed.

Responsible disclosure rules (CVD policy)

Technical report

Required fields are marked with *.

Affected system

Area *

Version / software release

Product, service or URL *

For example MAK 3003, DICO 700, V-Plus, a control system or a specific URL.

Vulnerability

Short title *

Technical description *

Describe the cause, attack path and affected security objectives. Do not include real credentials.

Reproduction steps *

Provide a minimal, non-destructive proof. Do not copy or alter third-party data.

Potential impact

Known mitigation

Planned disclosure date

Please allow Schwarte Jansky reasonable time to investigate and remediate, and coordinate publication in advance.

Contact details (optional)

Leave all fields empty to report anonymously.

Name or pseudonym

Organisation

Email address

Only required if you would like a response.

PGP fingerprint

I have read the CVD Policy and will follow it, in particular the prohibition on destructive testing and accessing third-party data. *

This confirmation is not consent under data protection law. Processing details are provided below the form and in the privacy notice.

The report will be processed solely for assessment, remediation and coordinated disclosure.

Privacy notice for vulnerability reports

When you use the form, we process the technical information you enter. Name, organisation, email address and PGP fingerprint are optional; anonymous reports are possible. In addition, a value derived from your IP address and pseudonymised with a secret key is stored for about one hour to limit automated abuse and an excessive number of submissions. The IP address is not included in the report email. The form does not set cookies.

The purposes are receiving, technically assessing, remedying and documenting vulnerabilities and coordinating their disclosure. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in the security of our products, services and customers) and, where a legal obligation to process or report applies, additionally Art. 6(1)(c) GDPR.

The report is sent as an email to our security team. The connection between your browser and the web server is encrypted with HTTPS; the email itself is not end-to-end encrypted. File attachments are not accepted. Reports are kept until processing is complete and then for up to 24 months; longer retention only where required by law or necessary to establish, exercise or defend legal claims.

Details of the controller are given in the legal notice; information on your rights, including the right to lodge a complaint with a supervisory authority, is in the privacy notice.