Procedure in the Event of Security Breaches
If you encounter any security issues with our product, please send a message to the following email address: security-issue@kixdesk.com (encrypted via S/MIME if necessary)
Information needed:
A description that is as detailed as possible is helpful for quick review and processing. If possible, it should include the following details:
Steps to reproduce: Precise instructions or a proof of concept (PoC) to ensure reproducibility
Discovery: Information on how the vulnerability was discovered.
Risk assessment: Your own evaluation of the potential impact.
Proposed solutions: Optional recommendations or approaches for resolving the issue.
Process & Responsible Disclosure
Every incoming bug report undergoes internal technical validation before a response is provided. Due to this thorough review, the response may take some time. The reporter will be kept informed of the current status of the analysis and resolution.
In accordance with the principle of responsible disclosure, we ask that you treat security vulnerabilities as confidential until a corresponding update is released. Upon request, reporters will be named in the official security advisories once the issue has been successfully resolved.
This procedure complies with the standard for responsible handling of security risks, as is also applied when reporting vulnerabilities in third-party software.