Responsible disclosure.
Security matters to us. If you find a weakness in one of our systems, we would like to hear from you so we can fix it quickly.
How to report
Mail your findings to hello [at] abykys.com with "Responsible disclosure" in the subject. Describe the problem and the steps to reproduce it, and leave your contact details so we can reach you.
What we ask
- Do not use the weakness more than needed to show that it exists.
- Do not view, change or delete data that is not yours, and do not share it with others.
- Do not use social engineering, denial of service, spam or attacks on physical security.
- Give us reasonable time to fix the problem before you tell others about it.
What we promise
- We respond within five working days with our assessment and an expected date for a fix.
- We treat your report confidentially and do not share your details without your permission.
- If you follow these rules, we will not take legal action against you because of your report.
- We keep you informed and, if you wish, mention your name once the problem is solved.
This policy follows the guideline for coordinated vulnerability disclosure of the Dutch National Cyber Security Centre (NCSC).