{"id":10424,"date":"2026-09-01T14:34:30","date_gmt":"2026-09-01T12:34:30","guid":{"rendered":"https:\/\/cavea.net\/?page_id=10424"},"modified":"2026-09-10T14:04:08","modified_gmt":"2026-09-10T12:04:08","slug":"security-policy","status":"publish","type":"page","link":"https:\/\/cavea.net\/en\/security-policy","title":{"rendered":"Security-Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"10424\" class=\"elementor elementor-10424 elementor-10413\" data-elementor-settings=\"{&quot;element_pack_global_tooltip_width&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;element_pack_global_tooltip_width_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;element_pack_global_tooltip_width_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;element_pack_global_tooltip_padding&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;top&quot;:&quot;&quot;,&quot;right&quot;:&quot;&quot;,&quot;bottom&quot;:&quot;&quot;,&quot;left&quot;:&quot;&quot;,&quot;isLinked&quot;:true},&quot;element_pack_global_tooltip_padding_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;top&quot;:&quot;&quot;,&quot;right&quot;:&quot;&quot;,&quot;bottom&quot;:&quot;&quot;,&quot;left&quot;:&quot;&quot;,&quot;isLinked&quot;:true},&quot;element_pack_global_tooltip_padding_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;top&quot;:&quot;&quot;,&quot;right&quot;:&quot;&quot;,&quot;bottom&quot;:&quot;&quot;,&quot;left&quot;:&quot;&quot;,&quot;isLinked&quot;:true},&quot;element_pack_global_tooltip_border_radius&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;top&quot;:&quot;&quot;,&quot;right&quot;:&quot;&quot;,&quot;bottom&quot;:&quot;&quot;,&quot;left&quot;:&quot;&quot;,&quot;isLinked&quot;:true},&quot;element_pack_global_tooltip_border_radius_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;top&quot;:&quot;&quot;,&quot;right&quot;:&quot;&quot;,&quot;bottom&quot;:&quot;&quot;,&quot;left&quot;:&quot;&quot;,&quot;isLinked&quot;:true},&quot;element_pack_global_tooltip_border_radius_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;top&quot;:&quot;&quot;,&quot;right&quot;:&quot;&quot;,&quot;bottom&quot;:&quot;&quot;,&quot;left&quot;:&quot;&quot;,&quot;isLinked&quot;:true}}\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ba2b849 e-con e-atomic-element e-flexbox-base e-db43f21 \" data-id=\"ba2b849\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"ba2b849\" data-e-type=\"e-flexbox\" data-id=\"ba2b849\">\n    \t\t<div class=\"elementor-element elementor-element-4aa9f3d elementor-widget elementor-widget-bdt-breadcrumbs\" data-id=\"4aa9f3d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"bdt-breadcrumbs.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class='bdt-ep-breadcrumbs-wrapper'><ul class=\"bdt-ep-breadcrumb breadcrumb-align-left  \"><li><a href=\"https:\/\/cavea.net\/en\">Cavea GmbH<\/a><\/li>\n<li><span> Page<\/span><\/li>\n<\/ul><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2652e1a elementor-widget elementor-widget-heading\" data-id=\"2652e1a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\">Cavea\u00ae Trust &amp; Security\n\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6d4dc97 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"6d4dc97\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Security and Vulnerability Disclosure<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1741966 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"1741966\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Security is a design requirement in every Cavea\u00ae product. If you have found a vulnerability, this page explains how to report it and what you can expect in return. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e8dff38 e-con e-atomic-element e-div-block-base e-e8dff38-bd85e2d \" data-id=\"e8dff38\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"e8dff38\" data-e-type=\"e-div-block\" data-id=\"e8dff38\">\n    \t\t<div class=\"elementor-element elementor-element-ea5754b elementor-align-left appointment-trigger elementor-widget__width-auto elementor-widget elementor-widget-button\" data-id=\"ea5754b\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;none&quot;,&quot;_animation_delay&quot;:1500}\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"mailto:psirt@cavea.net\" target=\"_blank\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" height=\"24px\" viewBox=\"0 -960 960 960\" width=\"24px\" fill=\"#080808\"><path d=\"M172.31-180Q142-180 121-201q-21-21-21-51.31v-455.38Q100-738 121-759q21-21 51.31-21h615.38Q818-780 839-759q21 21 21 51.31v455.38Q860-222 839-201q-21 21-51.31 21H172.31ZM480-457.69 160-662.31v410q0 5.39 3.46 8.85t8.85 3.46h615.38q5.39 0 8.85-3.46t3.46-8.85v-410L480-457.69Zm0-62.31 313.85-200h-627.7L480-520ZM160-662.31V-720v467.69q0 5.39 3.46 8.85t8.85 3.46H160v-422.31Z\"><\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Report vulnerability<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8ff6740 elementor-align-left appointment-trigger elementor-widget__width-auto elementor-widget elementor-widget-button\" data-id=\"8ff6740\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;none&quot;,&quot;_animation_delay&quot;:1500}\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-size-sm\" role=\"button\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">security.text<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/div>\n<div class=\"elementor-element elementor-element-e93774c e-con e-atomic-element e-flexbox-base e-21f0b91 \" data-id=\"e93774c\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"e93774c\" data-e-type=\"e-flexbox\" data-id=\"e93774c\">\n    <div class=\"elementor-element elementor-element-2ee85f3 e-con e-atomic-element e-flexbox-base e-0360cc0 \" data-id=\"2ee85f3\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"2ee85f3\" data-e-type=\"e-flexbox\" data-id=\"2ee85f3\">\n    \t\t<div class=\"elementor-element elementor-element-0b6622a elementor-widget elementor-widget-text-editor\" data-id=\"0b6622a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Contact<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-17119b9 elementor-widget elementor-widget-text-editor\" data-id=\"17119b9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tpsirt@cavea.net\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-36e2531 e-con e-atomic-element e-flexbox-base e-37e3b66 \" data-id=\"36e2531\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"36e2531\" data-e-type=\"e-flexbox\" data-id=\"36e2531\">\n    \t\t<div class=\"elementor-element elementor-element-4543697 elementor-widget elementor-widget-text-editor\" data-id=\"4543697\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tPreferred languages\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5bfff15 elementor-widget elementor-widget-text-editor\" data-id=\"5bfff15\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>German, English<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-5b55c1d e-con e-atomic-element e-flexbox-base e-d660556 \" data-id=\"5b55c1d\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"5b55c1d\" data-e-type=\"e-flexbox\" data-id=\"5b55c1d\">\n    \t\t<div class=\"elementor-element elementor-element-096f1ca elementor-widget elementor-widget-text-editor\" data-id=\"096f1ca\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tMachine-readable policy\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-349249b elementor-widget elementor-widget-text-editor\" data-id=\"349249b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\/.well-known\/security.txt\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/div>\n<div class=\"elementor-element elementor-element-523ba86 e-con e-atomic-element e-flexbox-base e-f83c694 \" data-id=\"523ba86\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"523ba86\" data-e-type=\"e-flexbox\" data-id=\"523ba86\">\n    <div class=\"elementor-element elementor-element-2d02101 e-con e-atomic-element e-flexbox-base e-2d02101-070c864 \" data-id=\"2d02101\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"2d02101\" data-e-type=\"e-flexbox\" data-id=\"2d02101\">\n    <div class=\"elementor-element elementor-element-062f3f8 e-con e-atomic-element e-flexbox-base e-062f3f8-4a26f9f \" data-id=\"062f3f8\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"062f3f8\" data-e-type=\"e-flexbox\" data-id=\"062f3f8\" >\n    <div class=\"elementor-element elementor-element-6bc0306 e-con e-atomic-element e-flexbox-base e-a29775c \" data-id=\"6bc0306\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"6bc0306\" data-e-type=\"e-flexbox\" data-id=\"6bc0306\">\n    \t\t<div class=\"elementor-element elementor-element-0c3269a elementor-hidden-mobile elementor-hidden-tablet elementor-widget elementor-widget-table-of-contents\" data-id=\"0c3269a\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;headings_by_tags&quot;:[&quot;h2&quot;],&quot;exclude_headings_by_selector&quot;:[],&quot;no_headings_message&quot;:&quot;Es wurden keine \\u00dcberschriften auf dieser Seite gefunden.&quot;,&quot;sticky&quot;:&quot;top&quot;,&quot;sticky_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;],&quot;sticky_offset&quot;:96,&quot;marker_view&quot;:&quot;bullets&quot;,&quot;icon&quot;:{&quot;value&quot;:&quot;&quot;,&quot;library&quot;:&quot;&quot;},&quot;min_height&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;min_height_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;min_height_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;sticky_effects_offset&quot;:0,&quot;sticky_anchor_link_offset&quot;:0}\" data-widget_type=\"table-of-contents.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__header\">\n\t\t\t\t\t\t<h2 class=\"elementor-toc__header-title\">\n\t\t\t\tContent\t\t\t<\/h2>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div id=\"elementor-toc__0c3269a\" class=\"elementor-toc__body\">\n\t\t\t<div class=\"elementor-toc__spinner-container\">\n\t\t\t\t<svg class=\"elementor-toc__spinner eicon-animation-spin e-font-icon-svg e-eicon-loading\" aria-hidden=\"true\" viewBox=\"0 0 1000 1000\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M500 975V858C696 858 858 696 858 500S696 142 500 142 142 304 142 500H25C25 237 238 25 500 25S975 237 975 500 763 975 500 975Z\"><\/path><\/svg>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/div>\n<div class=\"elementor-element elementor-element-80c5d95 e-con e-atomic-element e-flexbox-base \" data-id=\"80c5d95\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"80c5d95\" data-e-type=\"e-flexbox\" data-id=\"80c5d95\">\n    <div class=\"elementor-element elementor-element-5931b0c e-con e-atomic-element e-div-block-base \" data-id=\"5931b0c\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"5931b0c\" data-e-type=\"e-div-block\" data-id=\"5931b0c\">\n    <div class=\"elementor-element elementor-element-d8a2e26 e-con e-atomic-element e-flexbox-base e-d8a2e26-b82a720 \" data-id=\"d8a2e26\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"d8a2e26\" data-e-type=\"e-flexbox\" data-id=\"d8a2e26\">\n    \t\t<div class=\"elementor-element elementor-element-29b914c elementor-widget elementor-widget-text-editor\" data-id=\"29b914c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Security is a design requirement in every Cavea\u00ae product, from our Tribrid\u00ae tags to the software. No system is free of flaws, so we work with the security research community to find and fix them before they cause harm. This page explains how to report a vulnerability to us and what you can expect in return.<br\/>   <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\t\t\t\n<hr class=\"e-994ee35-65cd22f e-divider-base\" data-interaction-id=\"994ee35\"  data-e-type=\"widget\" data-id=\"994ee35\" \/>\n\t\t<div class=\"elementor-element elementor-element-e86ac7f e-con e-atomic-element e-flexbox-base \" data-id=\"e86ac7f\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"e86ac7f\" data-e-type=\"e-flexbox\" data-id=\"e86ac7f\">\n    \t\t<div class=\"elementor-element elementor-element-a25a28b elementor-widget elementor-widget-heading\" data-id=\"a25a28b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How to report\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-eb747ce e-con e-atomic-element e-flexbox-base e-eb747ce-1889071 \" data-id=\"eb747ce\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"eb747ce\" data-e-type=\"e-flexbox\" data-id=\"eb747ce\">\n    \t\t<div class=\"elementor-element elementor-element-710df5e elementor-widget elementor-widget-text-editor\" data-id=\"710df5e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-dc-tpl=\"70\" data-om-id=\"a8972d6b:74\">Send your report to <a href=\"mailto:psirt@cavea.net\" data-dc-tpl=\"71\" data-om-id=\"a8972d6b:75\">psirt@cavea.net<\/a>. To help us validate and fix the issue quickly, please include: <\/p>\n\n<ul data-dc-tpl=\"72\" data-om-id=\"a8972d6b:76\">\n \t<li data-dc-tpl=\"73\" data-om-id=\"a8972d6b:77\"><span data-dc-tpl=\"75\" data-om-id=\"a8972d6b:79\">The affected product, component, or URL, and the version or environment where you observed it.<\/span><\/li>\n \t<li data-dc-tpl=\"76\" data-om-id=\"a8972d6b:80\"><span data-dc-tpl=\"78\" data-om-id=\"a8972d6b:82\">A clear description of the vulnerability and its potential impact.<\/span><\/li>\n \t<li data-dc-tpl=\"79\" data-om-id=\"a8972d6b:83\"><span data-dc-tpl=\"81\" data-om-id=\"a8972d6b:85\">Step-by-step instructions or a proof of concept that lets us reproduce the issue.<\/span><\/li>\n \t<li data-dc-tpl=\"82\" data-om-id=\"a8972d6b:86\"><span data-dc-tpl=\"84\" data-om-id=\"a8972d6b:88\">Any relevant logs, screenshots, or configuration details.<\/span><\/li>\n<\/ul>\n<p data-dc-tpl=\"85\" data-om-id=\"a8972d6b:89\">Please report in English or German. If your report contains sensitive details, let us know in your first message and we will arrange a secure channel. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\t\t\t\n<hr class=\"e-fd96abc-c3c7be8 e-divider-base\" data-interaction-id=\"fd96abc\"  data-e-type=\"widget\" data-id=\"fd96abc\" \/>\n\t\t<div class=\"elementor-element elementor-element-b0c91d8 e-con e-atomic-element e-flexbox-base \" data-id=\"b0c91d8\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"b0c91d8\" data-e-type=\"e-flexbox\" data-id=\"b0c91d8\">\n    \t\t<div class=\"elementor-element elementor-element-ede337a elementor-widget elementor-widget-heading\" data-id=\"ede337a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Scope<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-30363e1 e-con e-atomic-element e-flexbox-base e-30363e1-d53cab3 \" data-id=\"30363e1\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"30363e1\" data-e-type=\"e-flexbox\" data-id=\"30363e1\">\n    \t\t<div class=\"elementor-element elementor-element-2f64d83 elementor-widget elementor-widget-text-editor\" data-id=\"2f64d83\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-dc-tpl=\"70\" data-om-id=\"a8972d6b:74\">This policy covers Cavea\u00ae hardware products, firmware, the software, and the web services operated under cavea.net. If you are unsure whether something is in scope, report it anyway and we will tell you. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\t\t\t\n<hr class=\"e-f7d8cc2-92a7d6e e-divider-base\" data-interaction-id=\"f7d8cc2\"  data-e-type=\"widget\" data-id=\"f7d8cc2\" \/>\n\t\t<div class=\"elementor-element elementor-element-899562f e-con e-atomic-element e-flexbox-base \" data-id=\"899562f\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"899562f\" data-e-type=\"e-flexbox\" data-id=\"899562f\">\n    \t\t<div class=\"elementor-element elementor-element-8f1f98a elementor-widget elementor-widget-heading\" data-id=\"8f1f98a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What we ask of you<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-331a3af e-con e-atomic-element e-flexbox-base e-331a3af-d5133a3 \" data-id=\"331a3af\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"331a3af\" data-e-type=\"e-flexbox\" data-id=\"331a3af\">\n    \t\t<div class=\"elementor-element elementor-element-87ed8bd elementor-widget elementor-widget-text-editor\" data-id=\"87ed8bd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-dc-tpl=\"93\" data-om-id=\"a8972d6b:97\">We ask researchers to act in good faith and to avoid harm while testing:<\/p>\n<ul data-dc-tpl=\"94\" data-om-id=\"a8972d6b:98\">\n<li data-dc-tpl=\"95\" data-om-id=\"a8972d6b:99\"><span data-dc-tpl=\"97\" data-om-id=\"a8972d6b:101\">Do not access, modify, or delete data that is not your own, and stop as soon as you have confirmed a vulnerability exists.<\/span><\/li>\n<li data-dc-tpl=\"98\" data-om-id=\"a8972d6b:102\"><span data-dc-tpl=\"100\" data-om-id=\"a8972d6b:104\">Do not degrade, disrupt, or overload our services, and do not run denial-of-service tests.<\/span><\/li>\n<li data-dc-tpl=\"101\" data-om-id=\"a8972d6b:105\"><span data-dc-tpl=\"103\" data-om-id=\"a8972d6b:107\">Do not use social engineering, phishing, or physical attacks against our staff, customers, or facilities.<\/span><\/li>\n<li data-dc-tpl=\"104\" data-om-id=\"a8972d6b:108\"><span data-dc-tpl=\"106\" data-om-id=\"a8972d6b:110\">Give us a reasonable opportunity to fix the issue before disclosing it publicly.<\/span><\/li>\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\t\t\t\n<hr class=\"e-ef2a541-51570ec e-divider-base\" data-interaction-id=\"ef2a541\"  data-e-type=\"widget\" data-id=\"ef2a541\" \/>\n\t\t<div class=\"elementor-element elementor-element-8baa0cd e-con e-atomic-element e-flexbox-base \" data-id=\"8baa0cd\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"8baa0cd\" data-e-type=\"e-flexbox\" data-id=\"8baa0cd\">\n    \t\t<div class=\"elementor-element elementor-element-7103401 elementor-widget elementor-widget-heading\" data-id=\"7103401\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Our commitment to you<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-f8b21e3 e-con e-atomic-element e-flexbox-base \" data-id=\"f8b21e3\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"f8b21e3\" data-e-type=\"e-flexbox\" data-id=\"f8b21e3\">\n    \t\t<div class=\"elementor-element elementor-element-8139cd3 elementor-widget elementor-widget-text-editor\" data-id=\"8139cd3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<section id=\"zusagen\" data-dc-tpl=\"107\" data-om-id=\"a8972d6b:111\">\n<p data-dc-tpl=\"110\" data-om-id=\"a8972d6b:114\">When you report in good faith and follow this policy, we commit to the following:<br\/><\/p>\n<\/section>\n<section id=\"offenlegung\" data-dc-tpl=\"125\" data-om-id=\"a8972d6b:129\"><\/section>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-8d98fda e-con e-atomic-element e-flexbox-base \" data-id=\"8d98fda\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"8d98fda\" data-e-type=\"e-flexbox\" data-id=\"8d98fda\">\n    \t\t<div class=\"elementor-element elementor-element-c2fb017 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"c2fb017\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" height=\"24px\" viewBox=\"0 -960 960 960\" width=\"24px\" fill=\"#00b0ff\"><path d=\"m422.46-323.69 255.85-255.85L650-607.85 422.46-380.31l-114-114L280.15-466l142.31 142.31ZM480.13-120q-74.67 0-140.41-28.34-65.73-28.34-114.36-76.92-48.63-48.58-76.99-114.26Q120-405.19 120-479.87q0-74.67 28.34-140.41 28.34-65.73 76.92-114.36 48.58-48.63 114.26-76.99Q405.19-840 479.87-840q74.67 0 140.41 28.34 65.73 28.34 114.36 76.92 48.63 48.58 76.99 114.26Q840-554.81 840-480.13q0 74.67-28.34 140.41-28.34 65.73-76.92 114.36-48.58 48.63-114.26 76.99Q554.81-120 480.13-120Zm-.13-40q134 0 227-93t93-227q0-134-93-227t-227-93q-134 0-227 93t-93 227q0 134 93 227t227 93Zm0-320Z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">We will acknowledge your report within three business days.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" height=\"24px\" viewBox=\"0 -960 960 960\" width=\"24px\" fill=\"#00b0ff\"><path d=\"m422.46-323.69 255.85-255.85L650-607.85 422.46-380.31l-114-114L280.15-466l142.31 142.31ZM480.13-120q-74.67 0-140.41-28.34-65.73-28.34-114.36-76.92-48.63-48.58-76.99-114.26Q120-405.19 120-479.87q0-74.67 28.34-140.41 28.34-65.73 76.92-114.36 48.58-48.63 114.26-76.99Q405.19-840 479.87-840q74.67 0 140.41 28.34 65.73 28.34 114.36 76.92 48.63 48.58 76.99 114.26Q840-554.81 840-480.13q0 74.67-28.34 140.41-28.34 65.73-76.92 114.36-48.58 48.63-114.26 76.99Q554.81-120 480.13-120Zm-.13-40q134 0 227-93t93-227q0-134-93-227t-227-93q-134 0-227 93t-93 227q0 134 93 227t227 93Zm0-320Z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">We will validate the issue and share our initial assessment within ten business days.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" height=\"24px\" viewBox=\"0 -960 960 960\" width=\"24px\" fill=\"#00b0ff\"><path d=\"m422.46-323.69 255.85-255.85L650-607.85 422.46-380.31l-114-114L280.15-466l142.31 142.31ZM480.13-120q-74.67 0-140.41-28.34-65.73-28.34-114.36-76.92-48.63-48.58-76.99-114.26Q120-405.19 120-479.87q0-74.67 28.34-140.41 28.34-65.73 76.92-114.36 48.58-48.63 114.26-76.99Q405.19-840 479.87-840q74.67 0 140.41 28.34 65.73 28.34 114.36 76.92 48.63 48.58 76.99 114.26Q840-554.81 840-480.13q0 74.67-28.34 140.41-28.34 65.73-76.92 114.36-48.58 48.63-114.26 76.99Q554.81-120 480.13-120Zm-.13-40q134 0 227-93t93-227q0-134-93-227t-227-93q-134 0-227 93t-93 227q0 134 93 227t227 93Zm0-320Z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">We will keep you informed as we work on a fix, and we will let you know when it is resolved.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" height=\"24px\" viewBox=\"0 -960 960 960\" width=\"24px\" fill=\"#00b0ff\"><path d=\"m422.46-323.69 255.85-255.85L650-607.85 422.46-380.31l-114-114L280.15-466l142.31 142.31ZM480.13-120q-74.67 0-140.41-28.34-65.73-28.34-114.36-76.92-48.63-48.58-76.99-114.26Q120-405.19 120-479.87q0-74.67 28.34-140.41 28.34-65.73 76.92-114.36 48.58-48.63 114.26-76.99Q405.19-840 479.87-840q74.67 0 140.41 28.34 65.73 28.34 114.36 76.92 48.63 48.58 76.99 114.26Q840-554.81 840-480.13q0 74.67-28.34 140.41-28.34 65.73-76.92 114.36-48.58 48.63-114.26 76.99Q554.81-120 480.13-120Zm-.13-40q134 0 227-93t93-227q0-134-93-227t-227-93q-134 0-227 93t-93 227q0 134 93 227t227 93Zm0-320Z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">We will credit you for the discovery if you would like us to, and respect your wish to stay anonymous if you prefer.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-6ed809e e-con e-atomic-element e-flexbox-base e-6ed809e-0af6518 \" data-id=\"6ed809e\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"6ed809e\" data-e-type=\"e-flexbox\" data-id=\"6ed809e\">\n    \t\t<div class=\"elementor-element elementor-element-6352934 elementor-widget elementor-widget-text-editor\" data-id=\"6352934\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<section id=\"zusagen\" data-dc-tpl=\"107\" data-om-id=\"a8972d6b:111\">\n<p data-dc-tpl=\"124\" data-om-id=\"a8972d6b:128\">We consider security research conducted under this policy to be authorized. We will not pursue or support legal action against researchers who act in good faith and stay within the guidelines above. If legal action is initiated by a third party against someone who complied with this policy, we will make it known that their actions were authorized.  <\/p>\n<\/section>\n<section id=\"offenlegung\" data-dc-tpl=\"125\" data-om-id=\"a8972d6b:129\"><\/section>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\t\t\t\n<hr class=\"e-805513e-22bbba9 e-divider-base\" data-interaction-id=\"805513e\"  data-e-type=\"widget\" data-id=\"805513e\" \/>\n\t\t<div class=\"elementor-element elementor-element-02d5611 e-con e-atomic-element e-flexbox-base \" data-id=\"02d5611\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"02d5611\" data-e-type=\"e-flexbox\" data-id=\"02d5611\">\n    \t\t<div class=\"elementor-element elementor-element-4bb0851 elementor-widget elementor-widget-heading\" data-id=\"4bb0851\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Coordinated disclosure\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-2ccb01c e-con e-atomic-element e-flexbox-base e-2ccb01c-e87d68a \" data-id=\"2ccb01c\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"2ccb01c\" data-e-type=\"e-flexbox\" data-id=\"2ccb01c\">\n    \t\t<div class=\"elementor-element elementor-element-f12d4e2 elementor-widget elementor-widget-text-editor\" data-id=\"f12d4e2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<section id=\"zusagen\" data-dc-tpl=\"107\" data-om-id=\"a8972d6b:111\">\n<p data-dc-tpl=\"110\" data-om-id=\"a8972d6b:114\">We follow a coordinated disclosure approach. We ask that you keep the details of any vulnerability confidential until we have released a fix, and we aim to resolve valid reports within 90 days. If a fix will take longer, we will tell you why and agree on a timeline together. Where relevant, we will assign a CVE identifier and publish an advisory once the fix is available.   <\/p>\n<\/section>\n<section id=\"offenlegung\" data-dc-tpl=\"125\" data-om-id=\"a8972d6b:129\"><\/section>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-1509b7e e-con e-atomic-element e-flexbox-base e-1509b7e-09ad17f \" data-id=\"1509b7e\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"1509b7e\" data-e-type=\"e-flexbox\" data-id=\"1509b7e\">\n    <div class=\"elementor-element elementor-element-14ef54f e-con e-atomic-element e-flexbox-base e-14ef54f-c01c270 \" data-id=\"14ef54f\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"14ef54f\" data-e-type=\"e-flexbox\" data-id=\"14ef54f\">\n    \t\t<div class=\"elementor-element elementor-element-4e5bc62 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"4e5bc62\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<span style=\"font-size: 28px; font-weight: 600; color: #001627;\">3 days<\/span><br\/><span style=\"font-size: 14px; font-weight: 400; color: #4A5C6B;\">Acknowledgement of your report<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-bea5f62 e-con e-atomic-element e-flexbox-base e-bea5f62-c99923a \" data-id=\"bea5f62\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"bea5f62\" data-e-type=\"e-flexbox\" data-id=\"bea5f62\">\n    \t\t<div class=\"elementor-element elementor-element-76fe5ca elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"76fe5ca\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-size: 28px; font-weight: 600; color: #001627;\">10 days<\/span><br\/><span style=\"font-size: 14px; font-weight: 400; color: #4a5c6b;\">Initial assessment shared<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-06ae865 e-con e-atomic-element e-flexbox-base e-06ae865-787dda3 \" data-id=\"06ae865\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"06ae865\" data-e-type=\"e-flexbox\" data-id=\"06ae865\">\n    \t\t<div class=\"elementor-element elementor-element-4d40985 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"4d40985\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-size: 28px; font-weight: 600; color: #001627;\">90 days<\/span><br\/><span style=\"font-size: 14px; font-weight: 400; color: #4a5c6b;\">Target for a released fix<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/div>\n\t\t\t\n<hr class=\"e-bab5517-ee730ba e-divider-base\" data-interaction-id=\"bab5517\"  data-e-type=\"widget\" data-id=\"bab5517\" \/>\n\t\t<div class=\"elementor-element elementor-element-53f3655 e-con e-atomic-element e-flexbox-base \" data-id=\"53f3655\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"53f3655\" data-e-type=\"e-flexbox\" data-id=\"53f3655\">\n    \t\t<div class=\"elementor-element elementor-element-08f696b elementor-widget elementor-widget-heading\" data-id=\"08f696b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Out of scope\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-07c0e23 e-con e-atomic-element e-flexbox-base e-07c0e23-16df986 \" data-id=\"07c0e23\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"07c0e23\" data-e-type=\"e-flexbox\" data-id=\"07c0e23\">\n    \t\t<div class=\"elementor-element elementor-element-c392c6a elementor-widget elementor-widget-text-editor\" data-id=\"c392c6a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<section id=\"zusagen\" data-dc-tpl=\"107\" data-om-id=\"a8972d6b:111\">\n<p data-dc-tpl=\"110\" data-om-id=\"a8972d6b:114\">The following are generally not treated as security vulnerabilities: reports from automated scanners without a demonstrated impact, missing security headers or best-practice recommendations with no exploitable effect, self-inflicted issues, and vulnerabilities in third-party services we do not operate. We still appreciate the heads-up and will forward reports to the relevant party where we can. <\/p>\n<\/section>\n<section id=\"offenlegung\" data-dc-tpl=\"125\" data-om-id=\"a8972d6b:129\"><\/section>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\t\t\t\n<hr class=\"e-d2d987f-8e9b8bc e-divider-base\" data-interaction-id=\"d2d987f\"  data-e-type=\"widget\" data-id=\"d2d987f\" \/>\n\t\t<div class=\"elementor-element elementor-element-2ad4c30 e-con e-atomic-element e-flexbox-base \" data-id=\"2ad4c30\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"2ad4c30\" data-e-type=\"e-flexbox\" data-id=\"2ad4c30\">\n    \t\t<div class=\"elementor-element elementor-element-014fbff elementor-widget elementor-widget-heading\" data-id=\"014fbff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Machine-readable contact<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-82b2061 e-con e-atomic-element e-flexbox-base e-82b2061-62b9cea \" data-id=\"82b2061\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"82b2061\" data-e-type=\"e-flexbox\" data-id=\"82b2061\">\n    \t\t<div class=\"elementor-element elementor-element-19b3e03 elementor-widget elementor-widget-text-editor\" data-id=\"19b3e03\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-dc-tpl=\"123\">A <code data-dc-tpl=\"147\" data-om-id=\"a8972d6b:151\">security.txt<\/code> file describing how to reach us is published at <a href=\"https:\/\/www.cavea.net\/.well-known\/security.txt\" data-dc-tpl=\"148\" data-om-id=\"a8972d6b:152\">https:\/\/www.cavea.net\/.well-known\/security.txt<\/a>, following RFC 9116.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-daf257f e-con e-atomic-element e-flexbox-base e-daf257f-9c494c8 \" data-id=\"daf257f\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"daf257f\" data-e-type=\"e-flexbox\" data-id=\"daf257f\">\n    <div class=\"elementor-element elementor-element-0cfd2e2 e-con e-atomic-element e-flexbox-base e-0cfd2e2-2cd28c0 \" data-id=\"0cfd2e2\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"0cfd2e2\" data-e-type=\"e-flexbox\" data-id=\"0cfd2e2\">\n    \t\t<div class=\"elementor-element elementor-element-298c5ad elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"298c5ad\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-size: 28px; font-weight: 600; color: #001627;\">The essentials\n<\/span>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/div>\n<div class=\"elementor-element elementor-element-5526c5b e-con e-atomic-element e-flexbox-base e-5526c5b-9185030 \" data-id=\"5526c5b\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"5526c5b\" data-e-type=\"e-flexbox\" data-id=\"5526c5b\">\n    <div class=\"elementor-element elementor-element-094813c e-con e-atomic-element e-flexbox-base e-094813c-c15dd7b \" data-id=\"094813c\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"094813c\" data-e-type=\"e-flexbox\" data-id=\"094813c\">\n    \t\t<div class=\"elementor-element elementor-element-1f2140d elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"1f2140d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-size: 14px; font-weight: 400; color: #4a5c6b;\">Email <\/span><br\/><span style=\"font-size: 20px; font-weight: 600; color: #001627;\">psirt@cavea.net<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-6ffa949 e-con e-atomic-element e-flexbox-base e-6ffa949-c02b35a \" data-id=\"6ffa949\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"6ffa949\" data-e-type=\"e-flexbox\" data-id=\"6ffa949\">\n    \t\t<div class=\"elementor-element elementor-element-a6af4c0 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"a6af4c0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-size: 14px; font-weight: 400; color: #4a5c6b;\">Preferred languages<\/span>\n<span style=\"font-size: 20px; font-weight: 600; color: #001627;\">Deutsch, Englisch<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n<div class=\"elementor-element elementor-element-fef7687 e-con e-atomic-element e-flexbox-base e-fef7687-1cc9dec \" data-id=\"fef7687\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"fef7687\" data-e-type=\"e-flexbox\" data-id=\"fef7687\">\n    \t\t<div class=\"elementor-element elementor-element-576de9f elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"576de9f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Machine-readable policy<br\/><span style=\"font-size: 20px; font-weight: 600; color: #001627;\">\/.well-known\/security.txt<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/div>\n<div class=\"elementor-element elementor-element-6b26145 e-con e-atomic-element e-flexbox-base e-6b26145-c969185 \" data-id=\"6b26145\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"6b26145\" data-e-type=\"e-flexbox\" data-id=\"6b26145\">\n    \t\t<div class=\"elementor-element elementor-element-e5cdd44 elementor-widget elementor-widget-text-editor\" data-id=\"e5cdd44\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-size: 13px; font-weight: 400; color: #4a5c6b;\">Policy Version 1.0 \u2014 Last updated on Sept. 10th 2026 2026.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Cavea GmbH Seite Cavea\u00ae Trust &amp; Security Security and Vulnerability Disclosure Security is a design requirement in every Cavea\u00ae product. If you [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"content-type":"","footnotes":""},"folder":[],"class_list":["post-10424","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Security and Vulnerability Disclosure | Cavea<\/title>\n<meta name=\"description\" content=\"Report a security vulnerability in Cavea\u00ae products. Our coordinated disclosure policy, scope, and response commitments.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cavea.net\/en\/security-policy\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"omlox: the Open Standard for RTLS Explained | Cavea\" \/>\n<meta property=\"og:description\" content=\"omlox is the open localization standard for RTLS. Core Zone, air interface, Hub, and Safety explained simply, plus how Cavea, as an omlox partner, provides support with omlox-compliant hardware.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cavea.net\/en\/security-policy\" \/>\n<meta property=\"og:site_name\" content=\"Cavea GmbH\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-10T12:04:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cavea.net\/wp-content\/uploads\/2026\/06\/omlox-og-de-1024x538.webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cavea.net\\\/en\\\/security-policy\",\"url\":\"https:\\\/\\\/cavea.net\\\/en\\\/security-policy\",\"name\":\"Security and Vulnerability Disclosure | Cavea\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cavea.net\\\/en\\\/#website\"},\"datePublished\":\"2026-09-01T12:34:30+00:00\",\"dateModified\":\"2026-09-10T12:04:08+00:00\",\"description\":\"Report a security vulnerability in Cavea\u00ae products. Our coordinated disclosure policy, scope, and response commitments.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cavea.net\\\/en\\\/security-policy#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cavea.net\\\/en\\\/security-policy\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cavea.net\\\/en\\\/security-policy#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/cavea.net\\\/en\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security-Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cavea.net\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/cavea.net\\\/en\\\/\",\"name\":\"Cavea GmbH\",\"description\":\"Cavea provides RTLS &amp; IIoT solutions to automate your processes.\",\"publisher\":{\"@id\":\"https:\\\/\\\/cavea.net\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cavea.net\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/cavea.net\\\/en\\\/#organization\",\"name\":\"Cavea GmbH\",\"url\":\"https:\\\/\\\/cavea.net\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cavea.net\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/cavea.net\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/cavea-logo.svg\",\"contentUrl\":\"https:\\\/\\\/cavea.net\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/cavea-logo.svg\",\"width\":607,\"height\":148,\"caption\":\"Cavea GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/cavea.net\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/cavea-gmbh\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security and Vulnerability Disclosure | Cavea","description":"Report a security vulnerability in Cavea\u00ae products. Our coordinated disclosure policy, scope, and response commitments.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cavea.net\/en\/security-policy","og_locale":"en_US","og_type":"article","og_title":"omlox: the Open Standard for RTLS Explained | Cavea","og_description":"omlox is the open localization standard for RTLS. Core Zone, air interface, Hub, and Safety explained simply, plus how Cavea, as an omlox partner, provides support with omlox-compliant hardware.","og_url":"https:\/\/cavea.net\/en\/security-policy","og_site_name":"Cavea GmbH","article_modified_time":"2026-09-10T12:04:08+00:00","og_image":[{"url":"https:\/\/cavea.net\/wp-content\/uploads\/2026\/06\/omlox-og-de-1024x538.webp","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cavea.net\/en\/security-policy","url":"https:\/\/cavea.net\/en\/security-policy","name":"Security and Vulnerability Disclosure | Cavea","isPartOf":{"@id":"https:\/\/cavea.net\/en\/#website"},"datePublished":"2026-09-01T12:34:30+00:00","dateModified":"2026-09-10T12:04:08+00:00","description":"Report a security vulnerability in Cavea\u00ae products. Our coordinated disclosure policy, scope, and response commitments.","breadcrumb":{"@id":"https:\/\/cavea.net\/en\/security-policy#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cavea.net\/en\/security-policy"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cavea.net\/en\/security-policy#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/cavea.net\/en"},{"@type":"ListItem","position":2,"name":"Security-Policy"}]},{"@type":"WebSite","@id":"https:\/\/cavea.net\/en\/#website","url":"https:\/\/cavea.net\/en\/","name":"Cavea GmbH","description":"Cavea provides RTLS &amp; IIoT solutions to automate your processes.","publisher":{"@id":"https:\/\/cavea.net\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cavea.net\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cavea.net\/en\/#organization","name":"Cavea GmbH","url":"https:\/\/cavea.net\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cavea.net\/en\/#\/schema\/logo\/image\/","url":"https:\/\/cavea.net\/wp-content\/uploads\/2025\/01\/cavea-logo.svg","contentUrl":"https:\/\/cavea.net\/wp-content\/uploads\/2025\/01\/cavea-logo.svg","width":607,"height":148,"caption":"Cavea GmbH"},"image":{"@id":"https:\/\/cavea.net\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/cavea-gmbh"]}]}},"_links":{"self":[{"href":"https:\/\/cavea.net\/en\/wp-json\/wp\/v2\/pages\/10424","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cavea.net\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cavea.net\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cavea.net\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/cavea.net\/en\/wp-json\/wp\/v2\/comments?post=10424"}],"version-history":[{"count":6,"href":"https:\/\/cavea.net\/en\/wp-json\/wp\/v2\/pages\/10424\/revisions"}],"predecessor-version":[{"id":10973,"href":"https:\/\/cavea.net\/en\/wp-json\/wp\/v2\/pages\/10424\/revisions\/10973"}],"wp:attachment":[{"href":"https:\/\/cavea.net\/en\/wp-json\/wp\/v2\/media?parent=10424"}],"wp:term":[{"taxonomy":"folder","embeddable":true,"href":"https:\/\/cavea.net\/en\/wp-json\/wp\/v2\/folder?post=10424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}