<!DOCTYPE html>
<?php $pageTitle = "Security Reporting"; include 'includes/public-header.php'; ?>

<main id="main-content">
<section class="db-page-hero" aria-labelledby="hero-title"><div class="db-container"><h1 class="db-page-hero-title" id="hero-title">Security Reporting</h1><p class="db-page-hero-subtitle">If you have identified a security vulnerability or have a concern about the security of our systems, we want to hear from you. Your vigilance helps protect all our customers.</p></div></section>

<section class="db-section-sm"><div class="db-container"><div class="db-content animate"><div class="db-alert db-alert-info"><i class="fas fa-info-circle"></i><div><strong>Responsible disclosure:</strong> We encourage security researchers and members of the public to report potential vulnerabilities responsibly. Please do not publicly disclose a vulnerability before we have had an opportunity to investigate and address it. We are committed to working with the security community to verify and resolve any legitimate issues that are brought to our attention.</div></div></div></div></section>

<section class="db-section db-section-bg"><div class="db-container"><div class="db-content animate">
  <h2>How to Report a Security Issue</h2>
  <p>We provide dedicated channels for reporting different types of security concerns. Please select the appropriate channel to ensure your report reaches the right team as quickly as possible.</p>
  <div class="db-grid db-grid-3 db-mt-8">
    <div class="db-contact-card animate animate-delay-1"><div class="db-contact-card-icon"><i class="fas fa-bug"></i></div><div class="db-contact-card-body"><h4>Vulnerability Disclosure</h4><p>Report a security flaw in our website, mobile app, or online banking platform.</p><a href="mailto:security@dbhacu.com">security@dbhacu.com</a></div></div>
    <div class="db-contact-card animate animate-delay-2"><div class="db-contact-card-icon"><i class="fas fa-exclamation-triangle"></i></div><div class="db-contact-card-body"><h4>Report Fraud</h4><p>Suspicious transactions or unauthorised access to your account.</p><a href="report-fraud.html">Report fraud →</a></div></div>
    <div class="db-contact-card animate animate-delay-3"><div class="db-contact-card-icon"><i class="fas fa-envelope"></i></div><div class="db-contact-card-body"><h4>Phishing & Scams</h4><p>Forward suspicious emails or report scam calls and messages.</p><a href="scam-awareness.html">Report a scam →</a></div></div>
    <div class="db-contact-card animate animate-delay-1"><div class="db-contact-card-icon"><i class="fas fa-lock"></i></div><div class="db-contact-card-body"><h4>Account Security</h4><p>Concerns about password, PIN, or account access security.</p><a href="customer-support.html">Get support →</a></div></div>
    <div class="db-contact-card animate animate-delay-2"><div class="db-contact-card-icon"><i class="fas fa-code"></i></div><div class="db-contact-card-body"><h4>API & Integration</h4><p>Security issues related to our APIs or third-party integrations.</p><a href="mailto:api-security@dbhacu.com">api-security@dbhacu.com</a></div></div>
    <div class="db-contact-card animate animate-delay-3"><div class="db-contact-card-icon"><i class="fas fa-shield-alt"></i></div><div class="db-contact-card-body"><h4>General Security</h4><p>All other security questions, concerns, or inquiries.</p><a href="security-centre.html">Security Centre →</a></div></div>
  </div>
</div></div></section>

<section class="db-section"><div class="db-container"><div class="db-content animate">
  <h2>What to Include in Your Report</h2>
  <p>To help our security team investigate your report efficiently, please provide as much of the following information as possible:</p>
  <ul>
    <li><strong>A detailed description of the vulnerability or security concern:</strong> Explain what you found, how you found it, and what the potential impact could be.</li>
    <li><strong>Steps to reproduce:</strong> Provide a clear, step-by-step description of how to replicate the issue. Include the specific URLs, API endpoints, or application functions involved.</li>
    <li><strong>Affected systems or services:</strong> Identify which of our services, applications, or systems appear to be affected. This might include our website, mobile app, online banking platform, or APIs.</li>
    <li><strong>Supporting materials:</strong> Attach screenshots, screen recordings, log excerpts, or any other evidence that helps illustrate the issue. If possible, include a proof-of-concept that demonstrates the vulnerability.</li>
    <li><strong>Your contact information:</strong> Provide an email address or phone number where we can reach you for follow-up questions. You may report anonymously, but providing contact details allows us to keep you informed and acknowledge your contribution.</li>
    <li><strong>Date and time of discovery:</strong> Note when you identified the issue. This helps us correlate your report with system logs and activity records.</li>
  </ul>
  <p>The more complete your report, the faster our team can assess and address the issue. We appreciate the effort that goes into preparing a thorough submission.</p>
</div></div></section>

<section class="db-section db-section-bg"><div class="db-container"><div class="db-content animate">
  <h2>What Happens After You Report</h2>
  <p>When you submit a security report to <?= getSetting("site_name", "Deutsche Bank Holdings Delaware") ?>, here is what you can expect:</p>
  <ol>
    <li><strong>Acknowledgment:</strong> We will acknowledge receipt of your report within 2 business days. You will receive a unique reference number for tracking.</li>
    <li><strong>Triage:</strong> Our security team will assess the report to determine its validity, severity, and potential impact. Reports are prioritised based on the level of risk they pose to our customers and systems.</li>
    <li><strong>Investigation:</strong> A security analyst will investigate the issue, attempting to reproduce it and understand its scope. They may contact you for additional information or clarification during this phase.</li>
    <li><strong>Remediation:</strong> If the vulnerability is confirmed, our engineering team will develop and test a fix. The time required depends on the complexity of the issue and the systems involved.</li>
    <li><strong>Notification:</strong> Once the issue is resolved, we will notify you of the outcome. We may also publish a security advisory if the vulnerability is significant and disclosure is in the public interest.</li>
  </ol>
  <p>Throughout the process, we treat all reports with confidentiality. Your personal information and the details of your report are shared only with those team members who need them to investigate and resolve the issue.</p>
</div></div></section>

<section class="db-section"><div class="db-container"><div class="db-content animate">
  <h2>Our Commitment to Security Researchers</h2>
  <p>We value the contributions of the security research community. Individuals who report valid security vulnerabilities in good faith and in accordance with this policy can expect the following from us:</p>
  <ul>
    <li><strong>Timely acknowledgment:</strong> We will respond to your report promptly and keep you updated on our progress.</li>
    <li><strong>Respectful engagement:</strong> We will treat you with professionalism and courtesy. We recognise that security research benefits everyone and we welcome constructive input.</li>
    <li><strong>Recognition:</strong> With your permission, we may publicly acknowledge your contribution in our security advisories or on a dedicated acknowledgments page.</li>
    <li><strong>No legal action:</strong> We will not pursue legal action against individuals who act in good faith to identify and report vulnerabilities, provided they comply with this policy and applicable laws.</li>
  </ul>

  <h2>Safe Harbour</h2>
  <p><?= getSetting("site_name", "Deutsche Bank Holdings Delaware") ?> considers security research conducted in accordance with this policy to be authorised conduct. If you comply with the terms below, we will not initiate legal action or refer your activities to law enforcement:</p>
  <ul>
    <li>You report the vulnerability to us before disclosing it to any other party</li>
    <li>You do not access, modify, delete, or exfiltrate data that does not belong to you, beyond what is reasonably necessary to demonstrate the vulnerability</li>
    <li>You do not degrade the performance of our services, disrupt our operations, or compromise the security or privacy of our customers</li>
    <li>You do not engage in social engineering, phishing, or physical attacks against our employees, customers, or infrastructure</li>
    <li>You comply with all applicable laws and regulations</li>
  </ul>
  <p>This safe harbour does not extend to activities that are malicious, clearly disproportionate to the vulnerability being demonstrated, or conducted after we have asked you to stop. If you are uncertain whether a particular action falls within these boundaries, please contact us for guidance before proceeding.</p>
</div></div></section>

<section class="db-section db-section-bg"><div class="db-container"><div class="db-content animate">
  <h2>You May Also Be Interested In</h2></div>
  <div class="db-related db-mt-8">
    <a href="security-centre.html" class="db-card animate animate-delay-1" style="text-decoration:none;"><div class="db-card-icon"><i class="fas fa-shield-alt"></i></div><h3 class="db-card-title">Security Centre</h3><p class="db-card-text">Learn about the full range of security measures protecting your accounts and personal information.</p><span class="db-card-link">Learn more <i class="fas fa-arrow-right"></i></span></a>
    <a href="report-fraud.html" class="db-card animate animate-delay-2" style="text-decoration:none;"><div class="db-card-icon"><i class="fas fa-exclamation-triangle"></i></div><h3 class="db-card-title">Report Fraud</h3><p class="db-card-text">If you suspect fraudulent activity on your account, report it immediately for investigation.</p><span class="db-card-link">Report fraud <i class="fas fa-arrow-right"></i></span></a>
    <a href="scam-awareness.html" class="db-card animate animate-delay-3" style="text-decoration:none;"><div class="db-card-icon"><i class="fas fa-envelope"></i></div><h3 class="db-card-title">Scam Awareness</h3><p class="db-card-text">Recognise common scams and learn how to protect yourself from phishing and social engineering attacks.</p><span class="db-card-link">Learn more <i class="fas fa-arrow-right"></i></span></a>
  </div>
</div></section>

<section class="db-section db-cta"><div class="db-container"><div class="db-cta-inner animate"><h2 class="db-cta-title">Report a Security Concern</h2><p class="db-cta-description">Help us protect all customers by reporting potential security vulnerabilities or suspicious activity.</p><div class="db-cta-actions"><a href="mailto:security@dbhacu.com" class="db-btn db-btn-light db-btn-lg">Report a Security Issue</a><a href="security-centre.html" class="db-btn db-btn-outline-white db-btn-lg">Visit Security Centre</a></div></div></div></section>
</main>

<footer class="db-footer" role="contentinfo"><div class="db-container"><div class="db-footer-grid"><div class="db-footer-brand"><img src="logo.png" alt="<?= getSetting("site_name", "Deutsche Bank Holdings Delaware") ?>" width="160" height="40"><p><?= getSetting("site_name", "Deutsche Bank Holdings Delaware") ?> provides secure personal banking, business banking, digital banking, transfers, cards, and wealth management to clients worldwide.</p></div><div class="db-footer-col"><h4>Personal</h4><ul class="db-footer-links"><li><a href="accounts.html">Accounts</a></li><li><a href="transfers.html">Transfers</a></li><li><a href="cards.html">Cards</a></li><li><a href="digital-banking.html">Digital Banking</a></li><li><a href="open-account.html">Open an Account</a></li></ul></div><div class="db-footer-col"><h4>Business</h4><ul class="db-footer-links"><li><a href="business-banking.html">Business Overview</a></li><li><a href="business-account.html">Business Accounts</a></li><li><a href="corporate-bank.html">Corporate Banking</a></li></ul></div><div class="db-footer-col"><h4>Security & Help</h4><ul class="db-footer-links"><li><a href="security-centre.html">Security Centre</a></li><li><a href="report-fraud.html">Report Fraud</a></li><li><a href="help-centre.html">Help Centre</a></li><li><a href="faq.html">FAQs</a></li><li><a href="customer-support.html">Customer Support</a></li></ul></div><div class="db-footer-col"><h4>Company</h4><ul class="db-footer-links"><li><a href="about-us.html">About Us</a></li><li><a href="careers.html">Careers</a></li><li><a href="investor-relations.html">Investor Relations</a></li><li><a href="contact.html">Contact Us</a></li><li><a href="account/login.html">Log In</a></li><li><a href="account/register.html">Register</a></li></ul></div></div><div class="db-footer-bottom"><div class="db-footer-copyright">&copy; <span class="footer-year">2024</span> <?= getSetting("site_name", "Deutsche Bank Holdings Delaware") ?>. All rights reserved.</div><div class="db-footer-legal"><a href="privacy-policy.html">Privacy Policy</a><a href="terms.html">Terms of Use</a><a href="cookie-policy.html">Cookie Policy</a><a href="accessibility.html">Accessibility</a><a href="sitemap.html">Sitemap</a></div></div></div></footer>
<script src="plugin/jquery.min.js"></script><script src="plugin/bootstrap/js/bootstrap.bundle.min.js"></script><script src="assets/js/landing.js"></script>
<script>document.querySelector('.footer-year').textContent=new Date().getFullYear();</script>
<?php include 'includes/public-footer.php'; ?>
