We take all facets of security seriously at OpenProject. If you want to report a security concern, have remarks, or contributions regarding security at OpenProject, please reach out to us at security@openproject.com.
If you can, please send us a PGP-encrypted email using the following key:
- Key ID: 0x7D669C6D47533958,
- Fingerprint BDCF E01E DE84 EA19 9AE1 72CE 7D66 9C6D 4753 3958
- You may also find the key attached in our OpenProject repository.
Please find our full statement on security in this document: https://www.openproject.org/docs/security-and-privacy/statement-on-security/
OpenProject uses the security.txt standard for defining security policies.
You can find our security.txt here: www.openproject.org/security.txt
Please see securitytxt.org for more information.