News & Blog

Securepoint is a CVE Numbering Authority (CNA)

Securepoint GmbH, a manufacturer and provider of IT security for small and medium-sized businesses, has been accredited as a CVE Numbering Authority (CNA) since February 11, 2025.

Press release as PDF (German)

A CVE Numbering Authority (CNA) is an organization authorized by the CVE program to assign and publish CVE (Common Vulnerabilities and Exposures) IDs for security vulnerabilities in products within its specific area of responsibility. As a CNA, the company will record, assess, and report all Securepoint-related vulnerabilities. CVE identifiers are managed and coordinated by MITRE, a globally recognized organization dedicated to promoting research and development in the public interest. The role of a CNA is voluntary.

“We are delighted to be recognized as a CNA and proud to now be part of a global network of IT companies committed to identifying and resolving security vulnerabilities quickly and efficiently,” explains Michel Jockheck, contact person at Securepoint. “This status enables us to identify vulnerabilities early on and respond quickly, further enhancing the security of our products. We want to promote an open and constructive security culture in which potential security risks can be reported in confidence, addressed responsibly, and communicated transparently.”

The email address security@securepoint.de is available for reporting vulnerabilities. The associated disclosure policy can be found at https://securepoint.de/disclosure-policy. Information on older vulnerabilities in Securepoint products that have already been fixed is available at https://wiki.securepoint.de/Advisory.