Hello Security Researcher, Thank you for being an essential part of our effort to keep the internet safe. At Swedavia, we know that even with our state‐of‐the‐art development and operations, challenges can arise from areas beyond our direct control. That’s why your keen eye and expertise are so valuable to us. Your dedication to identifying and helping us fix potential vulnerabilities not only strengthens our security but also contributes to a safer digital world for everyone. We truly appreciate the time, passion, and care you bring to this critical work. Please know that your contributions are recognized and deeply valued by our entire team. We’re excited to collaborate with you and continue working together to make the internet a better, more secure place. Additionally, if you happen to discover a medium or above severity CVE, you might find our private program of interest. While this is not a binding offer and there is no obligation on our part, we may occasionally extend an invitation to join the program as a token of our appreciation for your exceptional work. Best regards, Security Team at Swedavia --------------- Swedavia appreciates the work of security researchers to make the internet a better - and more secure - place. Even though we aim to prevent security issues by applying state-of-the art development and operations processes, systems and technical services outside our direct control might have vulnerabilities and weaknesses and we aim to identify and address those before any negative impact occurs. We really appreciate your efforts.
This is a responsible disclosure program without bounties.
Validation times
We will validate all submissions within 15 Working days, once your submission has been verified by Intigriti.
Check our fix
We offer up to €50 bonus to verify a resolved issue for us (when requested).
This remains at the discretion of Swedavia to award.
Introduction
We are happy to announce our program! We've done our best to clean up our known issues and now would like to request your help to spot the ones we missed!
Feedback
Would you like to help us improve our program or have some feedback to share, please send your anonymous feedback here:
Program feedback link
Please note this form will be checked periodically and should not be used for submission or support queries.
Unauthorised and targeted hacking attacks against Swedavia's systems are strictly prohibited by law. However, if you discover a vulnerability in our systems during the course of your legitimate activities, we encourage you to report it to us as outlined in our Vulnerability Disclosure Policy. Please engage responsibly and help us protect our users and services.
General
This program follows Intigriti's triage standards.
Dear researchers, if you submit valid findings of medium severity or above within our VDP program, you may also be invited to our private program where you can earn a bounty reward!
For obvious reasons we can only allow submissions or applications for our program with a valid Intigriti account.
It will only take 2 minutes to create a new one or even less to log in with an existing account, so don't hesitate and let's get started. We would be thrilled to have you as part of our community.
