Responsible Disclosure

Fastweb considers data protection and the protection of its customers a priority and therefore adopts a safe development process for its systems, services and products at every phase, from design to release.

Despite this, occasionally, some vulnerabilities are not detected and / or occur once the product, application or service is released to the public. That is why, to further improve its levels of security and reliability, Fastweb has published this Responsible Disclosure procedure. Its aim is to involve researchers and more generally, cyber security enthusiasts to help the company to make its systems even safer and more reliable responsibly managing security vulnerabilities, in a mutual commitment to protect the security and privacy of its customers.

Fastweb therefore would ask anyone who has discovered a vulnerability in one of its systems, services or products, such as

• Fastweb portals, “.fastweb.it”, domains (except www.gestione-documenti.fastweb.it and www.i-miei-documenti.fastweb.it);
• Fastweb branded devices (e.g. ADSL modem-routers with the exception of mobile phones);
• Fastweb branded mobile applications published on official stores (e.g. MyFastweb, FASTcloud Drive, Fastmail, etc.);

to subscribe to the portal at this link and

Once the report is received, Fastweb undertakes:

Reports relating to the following cases are excluded from this Responsible Disclosure procedure and will therefore be rejected:

Fastweb also does not plan to provide users participating in the program with resources such as accounts or dedicated test environments.

Fastweb reserves the right to update the Responsible Disclosure procedure described above at any time.

Fastweb thanks all those who have responsibly contributed to improving the security of its systems, services and products, demonstrating their excellent technical skills in the field of computer security!