Zeppelin Vulnerability Disclosure Program

Report a Security Vulnerability

The Zeppelin Group values the responsible disclosure of security vulnerabilities. If you believe you have identified a security vulnerability affecting a Zeppelin website, application, or online service, we encourage you to report it to us.

How to Report

Please submit your report by email to:

security-disclosure@zeppelin.com

To help us investigate and remediate the issue efficiently, please include the following information where possible:

• A description of the vulnerability
• The affected system, application, or URL
• Steps to reproduce the issue
• Proof of concept or screenshots (if available)
• The potential impact of the vulnerability

Our Commitment

When receiving a valid vulnerability report, Zeppelin will:

• Acknowledge receipt of the report
• Investigate the reported issue
• Take appropriate remediation actions where necessary
• Communicate with the reporting party regarding the status of the investigation where appropriate

Responsible Disclosure Guidelines

We ask security researchers to:

• Act in good faith and avoid privacy violations, data destruction, or service disruption
• Only access data necessary to demonstrate the vulnerability
• Refrain from exploiting vulnerabilities beyond what is required for proof of concept
• Not publicly disclose vulnerabilities until Zeppelin has had a reasonable opportunity to investigate and remediate the issue

Legal Safe Harbor

Zeppelin will not initiate legal action against security researchers who:

• Act in good faith
• Follow the principles described on this page
• Avoid actions that compromise the confidentiality, integrity, or availability of systems and data

Scope

This disclosure process applies to internet-facing websites, applications, and online services owned and operated by Zeppelin.