Security Policy

Coordinated Vulnerability Disclosure (CVD) Policy

Darveen follows Coordinated Vulnerability Disclosure principles and is committed to handling reported vulnerabilities in a responsible and transparent manner. Our disclosure activities are coordinated with reporters and aligned with applicable requirements under the EU Cyber Resilience Act (CRA).

How to Report a Vulnerability

For the secure submission of sensitive information, please use PGP public-key encryption.

Safe Harbor: Darveen will not initiate legal action against security researchers who conduct vulnerability research in good faith and comply with this policy.