Legal

Security

Reporting vulnerabilities

Found a security vulnerability on this website or in a service operated by Oberland AI? Please email security@oberland-ai.de. This is the only channel for reports; please do not use social media or public forums.

Helpful details: the affected address or service, a description of the issue, steps to reproduce and, if available, a proof of concept that does not involve third-party data.

What you can expect from us

• Acknowledgement within three working days
• An initial assessment and regular updates on progress
• Confidential handling of your report and your details
• Credit as the finder once the issue is fixed, if you wish

What we ask of you

• Act in good faith and only as far as needed to demonstrate the issue.
• Do not access third-party data, do not change or delete anything and do not disrupt services (no load or DoS tests, no social engineering).
• Do not disclose the issue publicly until it is fixed or we have agreed on a date.

If you follow these rules, we will not take legal action against you.

Machine-readable contact details: https://oberland-ai.de/.well-known/security.txt.