
Beiersdorf
External Program
Submit bugs directly to this organization
No technology is perfect, and Beiersdorf believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. If you believe you have found a security issue in our exposed systems, we encourage you to notify us by a coordinated disclosure of vulnerabilities.
We welcome working with you to resolve the issue promptly and kindly ask you to keep the vulnerability as well as any information thereto confidential until Beiersdorf has fixed it and given express consent for disclosure.
Beiersdorf will make a best effort to meet the following SLAs for hackers participating in our program:
| Type of Response | SLA in business days |
|---|---|
| First Response | 2 days |
| Time to Triage | 2 days |
| Time to Resolution | depends on severity and complexity |
We’ll try to keep you informed about our progress throughout the process.
While researching, we would like to ask you to refrain from: • Denial of service • Spamming • Social engineering (including phishing) of Beiersdorf staff or contractors • Any physical attempts against Beiersdorf property or data centers • Run automated scans without checking with Beiersdorf first • Vulnerabilities which require a jailbroken device • Missing http security headers which do not lead to a vulnerability • Tests in a manner that would corrupt the operation of Beiersdorf solutions.
We affirm that we will not seek prosecution of any security researcher who reports any security vulnerability on a service or system, where the researcher has acted in good faith and in accordance with this disclosure policy. Any activities conducted in a manner consistent with this Disclosure Policy will be considered as an authorized conduct and we will not initiate any legal action against you. If legal action is initiated by a third party against you in connection with activities conducted under this policy, we will take steps to make it known that your actions were conducted in compliance with this policy.
Security vulnerabilities that are identified in Beiersdorf products or in website domains owned, operated, or controlled by Beiersdorf are in scope.
Thank you for helping keep Beiersdorf and our users safe!