At Sananet we take the security of our systems very seriously. Despite our care for the security of our systems, it can happen that there is a weak spot. If you have found a weak spot in one of our systems we would like to hear about it so we can take measures as soon as possible. We would like to work with you to better protect our customers and our systems.
What we ask:

• Email your findings to helpdesk@sananet.nl . Encrypt your findings with our PGP key to prevent the information from falling into the wrong hands
• Do not abuse the problem, for example by downloading more data than necessary to prove the leak or by accessing, deleting or modifying data of third parties
• Do not share the problem with others until it has been resolved and delete all confidential data obtained from the leak immediately after it has been resolved
• Do not use physical security attacks, social engineering, distributed denial of service, spam or third party applications; and
• Provide sufficient information to reproduce the problem so that we can solve it as soon as possible. Usually, the IP address or URL of the affected system and a description of the vulnerability is sufficient, but more complex vulnerabilities may require more.

What we promise:

• We will respond to your report within 3 days with our assessment of the report and an expected date for a fix,
• If you have complied with the above conditions, we will not take any legal action against you regarding the report,
• We will treat your report as confidential and will not share your personal data with third parties without your consent unless it is necessary to do so in order to comply with a legal obligation. Reporting under a pseudonym is possible,
• We will keep you informed of the progress in solving the problem,
• In communications about the reported problem we will, if you wish, mention your name as the discoverer.

We strive to resolve all problems as quickly as possible and we are happy to be involved in any publication about the problem after it is resolved.