Responding to vulnerabilities can be difficult. If a report is mishandled it can result in negative publicity and unnecessary effort.
Vulnerability response
If you offer a digitally enabled product or service you need to think about vulnerability management upfront. In the best case you have a well-meaning security researcher reporting to you, in the worst case you learn about security issues because they’re already being abused.
A well structured vulnerability response is important to ensure you don’t create additional problems by e.g. frustrating the researcher. Unfortunately it is very common that companies, that don’t have previous experience, make serious mistakes during their first vulnerability report and increase the harm.
A well structured process can turn a negative event into a chance to show that the company takes security seriously and helps regain the trust of customers. We can help you to build up the necessary processes and knowledge.