{"id":241,"date":"2026-09-24T23:02:55","date_gmt":"2026-09-24T23:02:55","guid":{"rendered":"https:\/\/bgdb.eu\/?page_id=241"},"modified":"2026-09-24T23:02:57","modified_gmt":"2026-09-24T23:02:57","slug":"coordinated-vulnerability-disclosure-cvd-policy","status":"publish","type":"page","link":"https:\/\/bgdb.eu\/bg\/coordinated-vulnerability-disclosure-cvd-policy\/","title":{"rendered":"Coordinated Vulnerability Disclosure (CVD) Policy"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Governing Regulation: EU Cyber Resilience Act (Regulation (EU) 2024\/2847)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At BG SPIRIT LLC, we take the security of our digital products seriously. This policy outlines our commitment to identifying, managing, and remediating vulnerabilities in  in accordance with the security-by-design principles of the EU Cyber Resilience Act (CRA).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We encourage security researchers, users, and the public to report any suspected vulnerabilities to us safely and responsibly.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. How to Report a Vulnerability<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If you discover a potential security vulnerability in , please submit a confidential report to our dedicated security team:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Email Contact: hvdhhh@gmail.com<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Please include the following information in your report:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>A detailed description of the vulnerability and the component affected.<\/li>\n\n\n<li>Step-by-step instructions or proof-of-concept (PoC) code to reproduce the issue.<\/li>\n\n\n<li>The potential impact or exploitability of the bug.<\/li>\n\n\n<li>Your contact information if you wish to receive updates.<\/li>\n\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">2. What We Ask of You<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">To protect our users and infrastructure, we request that you:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Avoid violating privacy laws, disrupting production systems, or destroying data during your research.<\/li>\n\n\n<li>Do not exploit the vulnerability beyond what is necessary to prove its existence.<\/li>\n\n\n<li>Provide us a reasonable amount of time to remediate the issue before publicly disclosing any details.<\/li>\n\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">3. Our Commitment and Timeline<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Upon receiving a verified report, BG SPIRIT LLC will handle the vulnerability without undue delay. Our response lifecycle conforms to the following maximum SLAs:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><strong>Acknowledgment: <\/strong>We will acknowledge receipt of your report within 48 hours.<\/li>\n\n\n<li><strong>Triage &#038; Validation: <\/strong>Our team will review and validate the vulnerability within 5 business days.<\/li>\n\n\n<li><strong>Remediation: <\/strong>We aim to develop a security update or mitigation path immediately. High-risk flaws are prioritized.<\/li>\n\n\n<li><strong>Public Disclosure: <\/strong>Once a fix or mitigation is available, we will publicly disclose the vulnerability details along with clear remediation instructions for our users.<\/li>\n\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">4. Regulatory Reporting (Article 14 Compliance)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">In compliance with Article 14 of the Cyber Resilience Act, if BG SPIRIT LLC becomes aware of an actively exploited vulnerability or a severe security incident within , we will formally notify the European Union Agency for Cybersecurity (ENISA) and competent national authorities within 24 hours of awareness.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. Safe Harbor<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">BG SPIRIT LLC will not pursue legal action against security researchers who discover and report vulnerabilities in good faith and comply fully with this policy.<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<p class=\"wp-block-paragraph\">Last Updated: September 24, 2026<\/p>","protected":false},"excerpt":{"rendered":"<p>Governing Regulation: EU Cyber Resilience Act (Regulation (EU) 2024\/2847) At BG SPIRIT LLC, we take the security of our digital products seriously. This policy outlines our commitment to identifying, managing, and remediating vulnerabilities in in accordance with the security-by-design principles of the EU Cyber Resilience Act (CRA). We encourage security researchers, users, and the public [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"pmpro_default_level":"","footnotes":""},"class_list":["post-241","page","type-page","status-publish","hentry","pmpro-has-access"],"_links":{"self":[{"href":"https:\/\/bgdb.eu\/bg\/wp-json\/wp\/v2\/pages\/241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bgdb.eu\/bg\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bgdb.eu\/bg\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bgdb.eu\/bg\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bgdb.eu\/bg\/wp-json\/wp\/v2\/comments?post=241"}],"version-history":[{"count":1,"href":"https:\/\/bgdb.eu\/bg\/wp-json\/wp\/v2\/pages\/241\/revisions"}],"predecessor-version":[{"id":242,"href":"https:\/\/bgdb.eu\/bg\/wp-json\/wp\/v2\/pages\/241\/revisions\/242"}],"wp:attachment":[{"href":"https:\/\/bgdb.eu\/bg\/wp-json\/wp\/v2\/media?parent=241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}