Report a security vulnerability

How to report

Email security@seo-bee.de. Include:

• the software version and your operating system;
• the steps that reproduce the issue;
• what an attacker gains from it;
• how you would like to be credited, if at all.

We write in German, English and Bosnian.

What we do

• We acknowledge your report within 3 working days.
• Once we have confirmed the issue, we send you our assessment and a plan for the fix.
• We release the fix as a free update for every version that still receives security updates.
• If a vulnerability is already being actively exploited, we report it to the competent authorities as the EU Cyber Resilience Act requires, and we inform users.
• We agree on disclosure with you. Unless you tell us otherwise, we thank you publicly in the release notes.

Please

• Test only on your own installation and your own data.
• Do not access other people's accounts or customer data, and do not overload our servers.
• Do not publish details until the fix is out or until 90 days after your report, whichever comes first.

If you follow these rules, we will not take legal action against you.

How long you get security updates

It is stated for each version on the pricing page: at least 5 years from purchase.