Our security policy

This security policy was updated on November 26th, 2023.

Response

Your report will be acknowledged within 5 business days. Any information shared with the security team stays within Peinser and will not be disseminated except as required to get the issue fixed or to coordinate a vendor response. As a security issue moves through our process we will keep the reporter updated. Our goal is to disclose bugs as soon as possible once a user mitigation is available. We will set a disclosure date once the bug is well-understood.

Reporting a vulnerability

Reports should be made to the security team at security@peinser.com. You may optionally encrypt your report using one of our GPG keys outlined in security.txt. Our primary public PGP is inlined below:

-----BEGIN PGP PUBLIC KEY BLOCK-----

mDMEZNP2ZhYJKwYBBAHaRw8BAQdAShBlQMcYvaql9sGE/nv9KMsR2hPmFPdHeYD1 bdiuAXK0NUpvZXJpIEhlcm1hbnMgKFNlY3VyaXR5a2V5IEFscGhhKSA8am9lcmlA cGVpbnNlci5jb20+iJkEExYKAEEWIQRT8aYhZoTJW+IcfoBJlO8awNH7NwUCZNP2 ZgIbAwUJAeEzgAULCQgHAgIiAgYVCgkICwIEFgIDAQIeBwIXgAAKCRBJlO8awNH7 N6k4AP9YMttegEFv2Am3ke4qMRHlLbe1zJspJqsxgPUr4hmoLwEA/hxHj3uJCU5m 1nLcqLFDxtXD9a3XEVrVEZokGCgdLwy4MwRk0/ZmFgkrBgEEAdpHDwEBB0CEU0u7 Hwvxo+x9h9u2EIqq5vOezkHi5VE6A7EW/PEmSYh+BBgWCgAmFiEEU/GmIWaEyVvi HH6ASZTvGsDR+zcFAmTT9mYCGyAFCQHhM4AACgkQSZTvGsDR+zc37gEA8xV7F0r1 g0uCInZjnwJ2g1KYgMP5k1IcMI6oSpCpY5gBAKWloVXVD/wTY6pMjEW9jyoV39lf Z9ES7wbxbDzGIwoFuDgEZNP2ZhIKKwYBBAGXVQEFAQEHQMPO1bME/M+MhWS+Sh9D qYbVgMXUP0fkYYcpSbV3Gy89AwEIB4h+BBgWCgAmFiEEU/GmIWaEyVviHH6ASZTv GsDR+zcFAmTT9mYCGwwFCQHhM4AACgkQSZTvGsDR+zdj7AEAzz3BIWA3kQmrnCZ5 69OOkL9e9+V7D/mr7+hjf8ukeqwA/jX9Ty7vjURFjFMwToDIy24ezxT9/WGYeNid
mmh2+AcO
=em/E
-----END PGP PUBLIC KEY BLOCK-----