Responsible Disclosure Policy | NFON [Contact](# "Contact") ![](/web-assets/f/290788/40x40/d98615a3ea/nfon-sales-contact.svg) Sales & General * [Talk to Sales](tel:+498000636624) * [Write to us](/en/request-information) Search * [![Products](https://a.storyblok.com/f/290788/40x40/539cd331b9/nfon-products.svg) Products](#) Call & Work ![AI icon](/assets/ai_icon.webp) + [Cloud Telephony](/en/products/cloud-telephony/) + [SIP Trunk](/en/products/enablement/) + [Devices](/en/products/devices) Build & Automate ![AI icon](/assets/ai_icon.webp) + [Assistants](/en/products/ai/assistants) + [Bots](/en/products/ai/bots) + [AI Agent Studio](/en/products/ai/agent-studio) Engage & Support ![AI icon](/assets/ai_icon.webp) + [Contact Center](/en/products/customer-contact/) Integrations & Add ons + [Integrations & Add ons](/en/integrations/) * [![Solutions](https://a.storyblok.com/f/290788/40x40/da156cbbb8/nfon-solutions-industries.svg) Solutions](#) Industries + [Health & Wellness](/en/solutions/health-wellness) + [Retail & E-Commerce](/en/solutions/retail) + [Finance & Legal](/en/solutions/finance-insurance) + [Travel & Hospitality](/en/solutions/hospitality) + [Public Sector](/en/solutions/public-sector) + [Energy](/en/solutions/energy) Success stories + [Customer Stories](/en/customer-stories/) * [![Partnerships](https://a.storyblok.com/f/290788/36x36/7bd105c67d/nfon-partner.svg) Partnerships](#) Partner with NFON + [Become a partner](/en/partner/become-partner) + [NGAGE](/en/partner/partner-programme) Partner Portal + [Partner Portal](https://partners.nfon.com/) * [![Help Centre](https://a.storyblok.com/f/290788/40x40/d01fbb4f30/help-nfon.svg) Help Centre](/en/help-center) * [Login](https://start.cloudya.com/ "Login") * International + [International](/en/security/responsible-disclosure-policy) + [Deutschland](/de) + [España](/es) + [France](/fr) + [Italia](/it) + [Österreich](/at) + [Polska](/pl) + [Portugal](/pt) + [United Kingdom](/gb) [![NFON Logo](/assets/logo-nfon.svg)](/en/ "NFON Home") * [Products](#) ![](/web-assets/f/290788/36x36/a9f3ceed6f/nfon-call-work.svg) Call & Work ![AI icon](/assets/ai_icon.webp) Seamless communication ![](/web-assets/f/290788/36x36/d03c61cf40/nfon-build-automate.svg) Build & Automate ![AI icon](/assets/ai_icon.webp) AI Automation ![](/web-assets/f/290788/36x36/106823b73b/nfon-engage-support.svg) Engage & Support ![AI icon](/assets/ai_icon.webp) Omnichannel support ![](/web-assets/f/290788/36x36/50b60f5411/nfon-integrations-add-ons.svg) Integrations & Add ons Connect Teams & CRMs + [![](/images/products-call-work-cloudteleophny-navbar-int_Fjf8b.webp) ### Cloud Telephony ![AI icon](/assets/ai_icon.webp) Seamless cloud telephony for every device. High-fidelity audio with European-grade security.](/en/products/cloud-telephony/) + [![](/images/products-call-work-siptrunk-navbar-int_ZH5NzW.webp) ### SIP Trunk Secure cloud connectivity for your existing hardware. Scales instantly with your business.](/en/products/enablement/) + [![](/images/products-call-work-devices-navbar-int_Z2dP6.webp) ### Devices Professional telephones and hardware designed for clear calls and all-day comfort.](/en/products/devices) + [![](/images/products-build-automate-assistants-navbar-int_2ghUIJ.webp) ### Assistants ![AI icon](/assets/ai_icon.webp) Pre-configured, plug-and-play digital roles like FrontDesk and Workdesk. Ready to deploy instantly with zero coding required.](/en/products/ai/assistants) + [![](/images/products-build-automate-bots-navbar-int_Z1p57Vm.webp) ### Bots ![AI icon](/assets/ai_icon.webp) Prompt-driven, multi-channel conversational experiences. Automate custom customer journeys across Web Chat, Voice, and Livechat.](/en/products/ai/bots) + [![A chatbot creation interface is shown with a readiness message, build report, agent prompt details, and created tools list, over a gradient background.](/images/products-build-agent-studio-navbar-int_Z1Y88dE.webp) ### AI Agent Studio ![AI icon](/assets/ai_icon.webp) Simply turn your ideas into AI agents for your business. Describe the task, create a working agent, then optimize it in one workspace.](/en/products/ai/agent-studio) + [![](/images/products-engage-support-navbar-int_1xyFBE.webp) ### Contact Center ![AI icon](/assets/ai_icon.webp) Omnichannel customer service for modern teams. Manage conversations, automation, AI assistance, and customer context.](/en/products/customer-contact/) + [![](/images/products-integrations-addons-navbar-int_Z1Ka5ea.webp) ### Integrations & Add ons Expand your capabilities and natively connect your everyday business to keep all workflows unified.](/en/integrations/) * [Solutions](#) ![](/web-assets/f/290788/40x40/da156cbbb8/nfon-solutions-industries.svg) Industries Tailored solutions ![](/web-assets/f/290788/40x40/155f2a989d/nfon-success.svg) Success stories 54,000+ trust us + [![](/images/solutions-health-wellness-navbar-int_Z15q3kJ.webp) ### Health & Wellness Secure communication for better patient experiences and care delivery.](/en/solutions/health-wellness) + [![](/images/solutions-retail-ecommerce-navbar-int_zUgjw.webp) ### Retail & E-Commerce Connected communication for modern retail and customer engagement.](/en/solutions/retail) + [![](/images/solutions-finance-legal-navbar-int_1Dy5Ax.webp) ### Finance & Legal Trusted communication for regulated and security-conscious organizations.](/en/solutions/finance-insurance) + [![](/images/solutions-hospitality-travel-navbar-int_17WoBe.webp) ### Travel & Hospitality Seamless communication for exceptional guest experiences and service.](/en/solutions/hospitality) + [![](/images/solutions-publicsector-navbar-int_YyABB.webp) ### Public Sector Reliable communication for responsive public services and citizen support.](/en/solutions/public-sector) + [![](/images/solutions-energy-navbar_FDoix.webp) ### Energy Reliable communication for responsive customer service, even during outages and peak demand.](/en/solutions/energy) + [![](/images/solutions-costumerstroy-navbar-int_Z1MdOsM.webp) ### Customer Stories Real-world impact across every industry. Explore how we solve complex communication challenges for Europe’s leading brands.](/en/customer-stories/) * [Partnerships](#) ![](/web-assets/f/290788/36x36/7bd105c67d/nfon-partner.svg) Partner with NFON Join the NFON network ![](/web-assets/f/290788/36x36/8c5c9a9c78/nfon-partner-portal.svg) Partner Portal Existing partner login + [![](/images/partnerships-partner-navbar-int_ZHYGKx.webp) ### Become a partner From onboarding to co-branded marketing, we provide the tools you need to win.](/en/partner/become-partner) + [![](/images/partnerships-ngage-navbar-int_Zs3yY9.webp) ### NGAGE Discover our tiered rewards system designed to help you scale your business and revenue.](/en/partner/partner-programme) + [![](/images/partnerships-partnerportal-navbar-int_2ki451.webp) ### Partner Portal Access partner tools, deal registration, training resources, and program benefits in one place.](https://partners.nfon.com/) * [Help Centre](/en/help-center) * Search * [Login](https://start.cloudya.com/ "Login") * en + [International](/en/security/responsible-disclosure-policy) + [Deutschland](/de) + [España](/es) + [France](/fr) + [Italia](/it) + [Österreich](/at) + [Polska](/pl) + [Portugal](/pt) + [United Kingdom](/gb) * [Contact](#) [Contact](# "Contact") + ![](/web-assets/f/290788/40x40/d98615a3ea/nfon-sales-contact.svg) Sales & General Get in touch with us. ![](/images/getstarted-talktosales-navbar-int_ZMspQ4.webp) ### Talk to Sales Get a free consultation to see how NFON products can meet your needs. [+49 8000 – 63 66 24](tel:+498000636624 "+49 8000 – 63 66 24
") ![](/images/getstarted-writetous-navbar-int_ZY7MOf.webp) ### Write to us Fill out our request form. Our experts will respond as soon as possible. [Write to us](/en/request-information "Write to us") Cybersecurity at NFON # Responsible Disclosure Policy Hello Friend! Thank you for your willingness in finding security vulnerabilities in our systems and your desire to report it to us professionally and honestly. Below you can see our responsible disclosure policy. Please note that this policy is a living document and check it regularly for changes. [Contact us](mailto:it-security@nfon.com "Contact us") ## Introduction At NFON, we are committed to ensuring the security of our information, systems and services and value the role of security researchers in helping us mitigate cyber security risk. If you believe you have discovered a suspected cyber threat or security vulnerability that affects the confidentiality, integrity or availability of NFONs information, systems or services, please submit a report to our security team via one of the methods below. For the protection of our customers, we treat all information regarding a vulnerability as confidential and ask that you do not publicly disclose, discuss or confirm the details of any suspected security issues. ## What is not allowed? While we encourage security research on our products and services, the following types of research are strictly prohibited: * Accessing or attempting to access accounts or information you are not authorized to * Any attempt to modify or destroy information * Sending or attempting to send unsolicited or unauthorized E-Mail or other types of messages * Conducting social engineering (including phishing) on Group employees, contractors, customers, or any other related party * Using automated tools for portscans, bruteforce, directory search, domain/subdomain search, fuzzing, or scanning in general * Posting, transmitting, uploading, linking to, sending or storing malware that could impact our services, products, or customers ## Scope Any NFON owned website, web-service or mobile application that handles reasonably sensitive user data is intended to be in scope. Examples include virtually all content in the following domains: * \*.nfon.com * \*.nfon.net * \*.cloudya.com * \*.mynfon.net * \*.cloud-cfg.com * \*.kommunikations-dienste.de ## Out of scope vulnerabilities The following vulnerabilities are considered out of scope: * Vulnerabilities identified with automated tools (including web scanners) that do not include proof-of-concept code or a demonstrated exploit. * Third-party applications, websites or services that integrate. * Discovery of any in-use service (vulnerable third-party code, for example) whose running version includes known vulnerabilities without demonstrating an existing security impact. * Missing security best bractices, i.e., security headers, mixed content, SSL/TLS, etc. * Rate limiting issues * Password policy * CSRF vulnerabilities without any impact * Host header injection without proof of user data extraction * DoS/DDoS ## Reporting a security issue You can responsibly disclose suspected vulnerabilities to the NFON Cyber Security Team by emailing **[it-security@nfon.com](mailto:it-security@nfon.com)** ## Report structure To assist us in investigating your report, we recommend you follow the structure: * Affected product or service, including affected URL(s) * Your name and contact information (if you do not wish to provide your personal information, you may contact us anonymously, or by using a pseudonym) * Date, time and time zone of when the suspected vulnerability was discovered * IP address used when the suspected vulnerability was discovered * Steps to reproduce the vulnerability (clear proof of concept) ## Guidelines for reporting To ensure a collaborative approach, please respect the guidelines set out below: * You are contacting us in your personal capacity and are at least 18 years of age or have your parent or guardian’s permission to contact us. * You will not engage in any activity that could harm NFON, our customers, employees, services and/or assets. * You will not share, compromise, or disclose any personally identifiable information. * You will not use social engineering or brute force methods to attempt to obtain confidential credentials. * You agree to comply with all applicable laws and regulations in connection with your security research activities. * You will allow us a reasonable opportunity to investigate and respond prior to contacting anyone else about this matter. ## Rewards NFON provides rewards for accepted vulnerability reports at its discretion. All researchers who submit an accepted vulnerability report to us will also be listed on our **[Hall Of Fame](https://www.nfon.com/INT/en/security/hall-of-fame)**. Should an accepted vulnerability report have a larger impact, our minimum reward is a €25 Amazon gift card. Reward amounts may vary depending upon the severity of the vulnerability reported and quality of the report. Keep in mind that this is not a contest or competition. **We reserve the right to determine the amount, or even whether a reward should be granted.** [Contact us](mailto:it-security@nfon.com "Contact us") ![NFON Logo](/assets/logo-nfon.svg) News * [Events](https://www.nfon.com/en/news/events) * [Press](https://corporate.nfon.com/en/communication/) Customers * [Cloudya Login](https://start.cloudya.com/auth/login) * [Admin Portal](https://admin.nfon.com/) * [NFON Status](https://status.nfon.com/) About NFON * [Corporate](https://corporate.nfon.com/en/) * [Investor Relations](https://corporate.nfon.com/en/investor-relations/ir-at-a-glance/) * [Sustainability & ESG](https://corporate.nfon.com/en/sustainability/) * [Career](https://corporate.nfon.com/en/careers/) Legal * [GTC-SLA](/en/legal/gtc-sla) * [Legal Notice](/en/legal/legal-notice) * [Trust Center](https://www.nfon.com/en/trust-center/) * [Data Protection](/en/legal/data-protection) * [Cookie Settings](javascript:onclick=UC_UI.showSecondLayer()) © 2026 - NFON | All rights reserved.