Nokkela-IT-Concept GmbH welcomes reports of security issues in its services, websites and published software.

Send your report to security@nokkela-it-concept.com.

This is the address published in the company's security.txt (RFC 9116), which is the authoritative source. Reports are read in German and English.

Helpful in a report: what is affected (URL, host, repository), how the issue can be reproduced, what impact you expect, and how you would like to be credited.

Please do not open a public issue for a suspected vulnerability, and please do not test in ways that degrade a service or touch other people's data.

This policy applies to the repositories of this organisation and to the services and websites operated by Nokkela-IT-Concept GmbH, including the nokkela.* domains.

Enquiries are usually answered within one business day. There is no bug bounty programme.