We take all facets of security seriously at OpenProject. If you want to report a security concern, have remarks, or contributions regarding security at OpenProject, please reach out to us at security@openproject.com.

If you can, please send us a PGP-encrypted email using the following key:

• Key ID: 0x7D669C6D47533958,
• Fingerprint BDCF E01E DE84 EA19 9AE1 72CE 7D66 9C6D 4753 3958
• You may also find the key attached in our OpenProject repository.

Please find our full statement on security in this document: https://www.openproject.org/docs/security-and-privacy/statement-on-security/

OpenProject uses the security.txt standard for defining security policies. You can find our security.txt here: www.openproject.org/security.txt

Please see securitytxt.org for more information.