TRUST CENTER

Security

Responsible Disclosure of Vulnerabilities

icomedias GmbH welcomes responsible vulnerability reports from security researchers, customers, and partners.

Contact: security@icomedias.com • PGP: https://www.icomedias.com/.well-known/security.asc • security.txt: https://www.icomedias.com/.well-known/security.txt

Our commitment: Acknowledgment within 3 business days • triage update • patch according to severity SLA (Critical 72 hours / High 2 weeks) • credit in the advisory • safe harbor.

We ask you: Do not publish before coordinated disclosure (90 days) • do not exfiltrate data • do not run DoS tests against production systems.

Reference: ISO/IEC 29147 and ISO/IEC 30111