VINCE Code of Conduct
We believe that successful vulnerability coordination requires an open exchange of ideas. This exchange is only possible in an environment that fosters dignity, understanding, and mutual respect, and where participants recognize the inherent worth of every person and group.
Harassment is never appropriate.
We pledge to make participation in our community a harassment-free experience for everyone, regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, religion, or sexual identity and orientation.
We pledge to act and interact in ways that contribute to an open, welcoming, diverse, inclusive, and healthy community.
We have adopted this code of conduct to define the behaviors we support (and don't support) in our vulnerability disclosure coordination practice.
We expect VINCE users to follow this code of conduct. We expect offenders who are asked to stop their harassing behavior to comply immediately.
We do not tolerate any form of harassment or offensive behavior in the context of our coordinated vulnerability disclosure practice, which includes the VINCE platform.
If a VINCE user engages in harassing behavior, the offender may be suspended from further participation in the VINCE platform.
Scope
This Code of Conduct applies across the VINCE platform, however we expect and encourage respectful and non-harassing behavior from all parties we engage with.
Reporting abuse
Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the CERT/CC using the private message to CERT/CC mechanism within VINCE. All complaints will be reviewed and investigated promptly and fairly.
Instructions for using the private message feature of VINCE can be found here.
All CERT/CC analysts are obligated to respect the privacy and security of the reporter of any incident.