RFC 9116 · Responsible Disclosure

Security & Vulnerability Disclosure Policy

We welcome coordinated reports from security researchers regarding vulnerabilities affecting zdkg.de or associated subdomains.

Reporting Channel

Email: security@zdkg.de
Machine-readable descriptor: /.well-known/security.txt

Provide clear reproduction steps, affected URLs/headers, and impact assessment.
Do not perform denial-of-service testing, automated high-rate fuzzing against shared infrastructure, social engineering, or access/modification of third-party data.
Give us a reasonable remediation window (target triage within 5 business days) prior to public disclosure.

Researchers acting in good faith within these boundaries will not face legal action from ZDKG Compute.