Reporting a Security Vulnerability

As a subsidiary of the Bundesdruckerei Group, genua GmbH ensures the protection of sensitive data and IT infrastructures through its services and technologies. As a federal IT security company, we assume social responsibility and are committed, in particular, to Germany’s digital sovereignty.

The security of the software, systems, and services we develop and deploy is always our top priority. That is why we are particularly keen to quickly identify and remediate any potential vulnerabilities.

Should you discover vulnerabilities in genua’s IT systems and products, we ask you to inform us. We will then contact you, if you wish, and immediately take appropriate measures to remediate the identified vulnerability as quickly as possible.

Procedure for Reporting the Security Vulnerability

  • Please e-mail your vulnerability findings to security@genua.de. Please encrypt your message using our PGP key, which can also be found via our security.txt file.
  • Alternatively, you can use the S/MIME certificate registered with our sister company d-trust to prevent the misuse of sensitive information. You can find instructions on how to use the certificate on the d-trust page regarding LDAP certificate queries.
  • Please provide as much detail as possible in your report so that we can reproduce and analyze the issue and take appropriate measures.
  • Ideally, please be available so that we can ask follow-up questions. The choice of contact method is up to you.
  • Comply with applicable laws and do not exploit any vulnerabilities – for example, by downloading documents, modifying or deleting data, or uploading code.
  • Do not disclose information regarding potential vulnerabilities to third parties or institutions, nor publish such information, until we have contacted you and consented to publication.
  • Do not carry out attacks on our IT systems, products, personnel, or infrastructure that aim to compromise, alter, or manipulate them.
  • Please allow us a reasonable amount of time to remediate vulnerabilities.

Further Procedure

  • We will attempt to fix the discovered vulnerability as quickly as possible.

  • If you have provided an e-mail address, you will receive both a confirmation of receipt and a response to your report from us.

Report a Security Vulnerability

Do you have any security-related comments regarding our solutions? We look forward to your feedback. Data and information submitted via this form are not encrypted; therefore, please use an alternative method of contact if possible.

Please note that this form is intended solely for security-related comments. If you have a different inquiry, please use our contact form. 

*
*
*
*

For further information on the processing of your personal data, please refer to our data privacy police.

You can find the underlying guidelines on responsible disclosure here.