-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

RFC 2350 Profile - XING Security Team
=========================================

1. About This Document

This document describes the XING Security Team according to RFC 2350.

It is intended to provide the general Internet community and other
security teams with basic information.


1.1. Date of Last Update

This version was published on 2026-11-04.


1.2 Distribution List for Notifications

There is no distribution list for this document.
Our RFC 2350 profile is kept up-to-date on the location named in section 1.3.


1.3 Locations Where This Document May Be Found

The current version of this document is available on our website:

  https://www.xing.com/.well-known/rfc-2350.txt


1.4 Authenticating This Document

This document is available via HTTPS. It is clearsigned with the following key:

  https://www.xing.com/.well-known/openpgpkey/xing-security.asc


2. Contact Information

2.1 Name of the Team

Full name:
  XING Core IT & Security

Short name:
  XING Security Team


2.2 Address

  XING SE & Co. KG
  Core IT & Security
  Baumwall 7
  20459 Hamburg
  Germany


2.3 Time Zone

  CET (UTC+1) / CEST (UTC+2, daylight saving time)


2.4 Telephone Number

  +49 40 419 131 - 0 (ask for the Core Security Team)


2.5 Facsimile Number

  None available.


2.6 Other Telecommunication Options

  None available.


2.7 Electronic Mail Address

  security-reports [at] xing [dot] com


2.8 Public Keys and Other Encryption Information

To encrypt sensitive data, please use our PGP key.

 - PGP: 0x2B2B3644A5C56621 (RSA, 4096 bits)
   https://www.xing.com/.well-known/openpgpkey/xing-security.asc
   https://keys.openpgp.org/search?q=2B2B3644A5C56621


2.9 Team Members

Dimitri Elzer is Director of Core IT & Security and CISO.

Robert Rainer, Senior Vice President of Technology, provides
management, liaison, and supervision.


2.10 Other Information

General information about the XING Security Team and security at XING in
general can be found at:

  https://privacy.xing.com/en/your-security
  https://trust.xing.com/


2.11 Points of Customer Contact

The preferred method for contacting the XING Security Team is via e-mail
at:

  security-reports [at] xing [dot] com

We can be reached by telephone during regular office hours.

For general issues, please contact our support at:

  https://www.xing.com/support/contact


3. Charter

3.1 Mission Statement

We assist and advise XING SE & Co. KG while safeguarding XING’s security
interests in dealings with internal and external parties.

Our mission is to ensure that XING and its customer data are as
secure as possible.

We provide a single point of contact for all security issues affecting
XING for both internal and external parties.


3.2 Constituency

Our constituency consists of the following:

  XING SE & Co. KG (Germany & Switzerland)
  XING Austria GmbH (Austria)
  XING Career Technologies, Unipessoal Lda. (Portugal)
  XING – part of New Work Networking Spain S.L. (Spain)

We are responsible for the following autonomous systems:

  AS50343
  AS207139


3.3 Sponsorship and/or Affiliation

The XING Security Team is based in Hamburg, Germany, and is part
of XING SE & Co. KG.


3.4 Authority

The Security Team responds to, investigates, and coordinates security
incidents on behalf of XING SE & Co. KG.


4. Policies

4.1 Types of Incidents and Level of Support

The XING Security Team addresses all types of information security
incidents that occur or threaten to occur within its remit.

The level of support depends on the severity of the respective incident.
We only provide limited direct support to users of the XING jobs network.
Please contact our support team at:

  https://www.xing.com/support/contact


4.2 Cooperation, Interaction and Disclosure of Information

Within the process of responding to an incident, we will exchange
necessary information with other authorised parties on an appropriate
legal basis.

The XING Security Team supports the traffic light protocol for information
sharing as published on https://www.first.org/tlp/.
Do not send unencrypted e-mails containing information labelled AMBER or
RED.

We operate under German law. This involves careful handling of
personally identifiable data with regard to data protection and privacy
laws. We may be obliged to disclose information if required by or under
any enactment or by a rule of law or order of a court.


4.3 Communication and Authentication

For sensitive information, use encrypted e-mail (our public keys are
listed in section 2.8). For non-sensitive information, unencrypted
e-mail or telephone communication is sufficient.


5. Services

5.1 Incident Response

The XING Security Team deals with and assists in the technical and
organisational aspects of information security incidents.

 - Analysis of information security incidents within our remit
 - Assessment of security vulnerabilities


5.2 Proactive Activities

 - Detect malicious activities within the XING jobs network
 - Generate awareness among XING's employees and partner organisations
 - Conduct security audits and reviews and test software applications


6. Incident Reporting Forms

Regarding the XING jobs network, you may use our regular contact
form by selecting the topic "Privacy Policy and Security":

  https://www.xing.com/support/contact/security

You can report abuse or suspicious activity directly within the XING
platform, for example, using the "report as spam" or "report profile"
functionality.

For all other information regarding security incidents, please contact
us via e-mail.
-----BEGIN PGP SIGNATURE-----
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=+4qy
-----END PGP SIGNATURE-----