On this page, security researchers who aim to identify security vulnerabilities can find the necessary information to disclose vulnerabilities to Marel. Please adhere to the rules listed on this page for Responsible Disclosure.
It will take time to handle each stage of the process with the appropriate attention. However, Marel will inform you when progress is made during the significant phases of our responsible disclosure process.
Jump to:
Introduction
Marel follows a responsible disclosure process to manage the discovery and reporting of security vulnerabilities in its software and systems in a controlled and coordinated manner. This process enables you to disclose vulnerabilities that you have discovered in a safe and ethical manner. By doing so, you allow Marel to address the reported vulnerabilities before they are exploited by malicious actors. Responsible disclosure helps to improve the overall security of Marel and protect its business partners, employees and other stakeholders from potential harm. Finally, the responsible disclosure process aims to build trust between security researchers and Marel to raise a positive and productive relationship between them.
Rules for Issuing a Report
Please report on:
Guidance for submission
What are the phases of our process?
The Marel Security Team will inform you of the process during the following stages:
Acknowledgement
In recognition of services provided, Marel expresses its gratitude to the following researchers for helping us to improve unity, promote excellence, and secure innovation within our organization. The following individuals were the first to have assisted us in acknowledging or addressing a vulnerability. By doing so, they have demonstrated skill in and a commitment to both helping others and improving security.
Researchers who submit vulnerability reports or conduct testing will be given full credit in any publicly released patch or security fix information if they request it and when it is possible for Marel to do so.
PGP
We use PGP (Pretty Good Privacy) to communicate with you for responsibly disclosing vulnerabilities. This provides several benefits like confidentiality, authentication, and non-repudiation.
For that reason, Marel has generated a private and public key-pair (below) for which we ask every user that wants to responsibly submit a security vulnerability to encrypt his findings and send it to responsibledisclosure@marel.com.
Kind regards,
Marel Security Team