Report a vulnerability

Submit your finding

We ask you to observe the following

• Report your findings via privacy@scope4mation.com or call +31 318 894 615. We help you exchange high-risk information securely.
• Do not exploit the vulnerability or view, download, delete or change more data than is necessary to demonstrate the finding.
• Report the finding as soon as possible and do not share it with others until the problem has been resolved.
• Delete any confidential data obtained during your investigation once the problem has been resolved.
• Do not use physical attacks, social engineering, spam, DDoS or attacks on third-party applications.
• Provide enough information to reproduce the problem, such as the URL or IP address and a description of the vulnerability.

What you can expect from us

• We respond as soon as possible, within three days at the latest, with our assessment and an expected resolution date.
• We treat your report confidentially and keep you informed of progress.
• If you comply with these conditions, we will not take legal action against you for the report.
• We aim to resolve the problem as soon as possible and coordinate any publication with you.
• We do not share your personal data without consent, unless legally required to do so.
• With your agreement, we can credit you as the discoverer; otherwise you remain anonymous.

Reward

We offer a reward for a security vulnerability previously unknown to us. The amount depends on its severity and the quality of the report, with a gift voucher worth at least €25.