Kraft Group PSIRT – Product Security Incident Response Team

The security of our products is a top priority for us. Despite careful development and regular testing, vulnerabilities can never be completely ruled out. That is why we rely on open communication with security researchers, customers, and partners: Anyone who discovers a potential vulnerability in one of our products can report it to us through our Product Security Incident Response Team (PSIRT).

Our team reviews and evaluates every report we receive and, if necessary, takes appropriate measures to address the issue. We treat all reports confidentially and adhere to the principles of Coordinated Vulnerability Disclosure described below. This ensures that vulnerabilities are handled responsibly before details are made public and that our customers remain reliably informed.

If you suspect that you have discovered a security vulnerability in a Kraft Group product, please report it using the contact form or by email.

Please include the following information in your email:

• Name of the person submitting the report
• Contact details: email address and phone number
• Name of the organization
• Name of the affected system
• Affected component, software or firmware version
• Type of vulnerability (e.g., XSS, buffer overflow, hard-coded credentials, CWE ID, CVE ID if available …)

What Happens to Your Report?

The Kraft Group ensures that the information is sent to a limited group of designated Kraft Group employees—the Kraft Group Product Security Incident Response Team (PSIRT). Neither unauthorized employees nor external users have access to the information you submit.

The Kraft Group also ensures that the security researcher’s identity and contact information are kept confidential. The Kraft Group PSIRT will investigate the reported vulnerability and contact you as soon as possible.