generated: '2026-07-18'
method: searched
source: https://www.credi2.com/legals/vulnerability-disclosure-policy
probe: false
policy:
- https://www.credi2.com/legals/vulnerability-disclosure-policy
contact:
- vulnerability.report@credi2.com
bug_bounty: false
bug_bounty_note: >-
  Credi2 GmbH explicitly does not pay rewards for disclosed security
  vulnerabilities.
scope: Credi2 website and subdomains; testing beyond stated scope requires partner consent.
reporting_requirements:
- URL or IP address and date of discovery
- Description of the issue
- Reproduction steps or a video demonstration
notes: >-
  Prohibits exploitation, public disclosure, brute-force, and DDoS testing.
  Reports are investigated but not confirmed publicly to protect customers.
evidence:
- source: https://www.credi2.com/legals/vulnerability-disclosure-policy
  kind: disclosure-policy-page