Vulnerability Disclosure Policy
At Peterwalkenhorst.com, we aim to keep our website secure and protect the data of our users. In this context, we actively engage with security researchers to identify vulnerabilities on our site with a view to resolve them. This policy outlines how you can report potential security issues to us and what we commit to do in response.
How to Report a Vulnerability
If you believe you have found a security vulnerability on this site, please submit a report to us as quickly as possible.
Kindly send a detailed report using the dedicated security tab on our contact form.
Please include the following in our report:
- A detailed description of the security issue.
- Step-by-step instructions on how to replicate the problem.
- Mention of any code, tool, browser, or operating system required to demonstrate the vulnerability.
- Your contact information.
Our Commitments to Reporters
If you follow this policy, we commit to the following:
- Acknowledging receipt of your report within 48 hours of submission.
- Committing resources to fixing the reported vulnerability in a timely manner.
- Publicly acknowledging your responsible disclosure on our website, unless you request anonymity.
- Refraining from pursuing legal action against you or ask law enforcement to investigate you, provided you comply with this policy and act in good faith (see below).
Rules of Engagement
To protect our users and our systems, we require all researchers to adhere to these rules:
- Do not access or modify data that belongs to other users.
- Do not interrupt or degrade our services (e.g., do not test DoS attacks).
- Do not disclose the vulnerability to the public until we have had a reasonable amount of time (10 days) to fix the issue.