-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Málaga City Vulnerability Disclosure Policy

## Introduction
Málaga City is committed to ensuring the security and privacy of our citizens and their data. We recognize the important role that security researchers and the broader community play in identifying vulnerabilities in our systems.

## Reporting a Vulnerability
If you discover a security vulnerability in any of our services, we encourage you to report it to us as soon as possible. Please send your findings to our security team at security@malaga.eu. Include a detailed description of the vulnerability, the potential impact, and any steps necessary to reproduce the issue.

## Coordinated Disclosure
We follow the principle of Coordinated Vulnerability Disclosure (CVD). This means we will work with you to understand and resolve the issue before any public disclosure. We request that you:
- - - - Allow us a reasonable amount of time to address the vulnerability before you disclose it publicly.
- - - - Avoid exploiting the vulnerability beyond what is necessary to confirm its existence.
- - - - Refrain from accessing, modifying, or deleting any data that does not belong to you.

## Our Commitment
Upon receiving your report, we commit to:
- - - - Acknowledge receipt of your report within 5 business days.
- - - - Provide an estimated timeline for addressing the vulnerability.
- - - - Notify you when the vulnerability has been resolved.
- - - - Credit you in our Hall of Fame (if you wish) for your contribution.

## Safe Harbor
Any activities conducted in a manner consistent with this policy will be considered authorized conduct and we will not initiate legal action against you. If legal action is initiated by a third party against you for activities conducted under this policy, we will make it known that your actions were conducted in compliance with this policy.

## Conclusion
We appreciate your efforts in helping us maintain the security and privacy of our systems and services. Your support is invaluable in making our community safer.

Thank you,
Centro de Ciberseguridad Ayuntamiento de Málaga
-----BEGIN PGP SIGNATURE-----
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=caxZ
-----END PGP SIGNATURE-----