Security
Responsible disclosure
Found a vulnerability in this website? Thank you for helping. Here’s how to report it responsibly.
Reporting
Send your report to security@cyberforge.be with a clear description, steps to reproduce and the potential impact. See also /.well-known/security.txt.
Scope
cyberforge.beand its subdomains
Client websites and applications are not covered by this policy.
Rules
- No denial of service, spam or social engineering.
- Do not go further than needed to demonstrate the vulnerability. Do not access, modify or delete other people’s data.
- Do not use automated scanners that generate heavy traffic.
- Do not disclose the vulnerability publicly before it is fixed, or until 90 days after your report.
What you can expect from me
- An acknowledgement within 3 business days.
- Regular updates on progress.
- No legal action against good-faith reports that follow these rules.
- Public credit as a thank-you, if you wish.
This is a small business without a bug bounty programme, so financial rewards are not offered.
Belgium has a legal framework for reporting vulnerabilities through the Centre for Cybersecurity Belgium (CCB). More information at ccb.belgium.be.