Responsible Disclosure
Report a vulnerability
Found a vulnerability? Report it confidentially. Together, we protect customers and systems.
Report it directly to us
Online reporting is temporarily unavailable. Contact us by email or phone; we will agree how to share further information safely.
Help us assess your report
- The application or URL where you found the issue.
- A short description and steps to reproduce it.
- The possible impact, without sending sensitive data.
Do not have all the details yet? You can contact us before your report is complete.
What we ask of you
- Report your findings to privacy@scope4mation.com or call +31 318 894 615. We will help arrange a safe exchange of sensitive information.
- Do not exploit the vulnerability or view, download, delete or change more data than necessary to demonstrate it.
- Report your findings as soon as possible and do not disclose them to others until the issue has been resolved.
- Delete confidential information obtained during your research once the issue has been resolved.
- Do not use physical attacks, social engineering, spam, DDoS or attacks on third-party applications.
- Provide enough information to reproduce the issue, such as the URL or IP address and a description of the vulnerability.
What you can expect from us
- We will respond as soon as possible, within three days at the latest, with our assessment and an expected resolution date.
- We treat your report confidentially and keep you informed of progress.
- If you follow these conditions, we will not take legal action against you for making the report.
- We aim to resolve the issue as soon as possible and will coordinate any publication with you.
- We do not share your personal data without permission unless legally required.
- With your agreement, we can name you as the discoverer; otherwise, you remain anonymous.
Reward
We offer a reward for a security vulnerability not previously known to us. The amount depends on its severity and the quality of the report, with a voucher of at least €25.
