Responsible Disclosure

At Benel, we believe it's extremely important that our systems are secure. Even though we do our best to protect everything properly, it's still possible that a vulnerability might be present somewhere.

Have you discovered such a vulnerability in one of our systems? Please let us know! That way, we can take action quickly. We are happy to work with you to better protect our customers and our systems.

We kindly ask you to:

• Email your discovery to info@benel.nl.
• Not exploit the vulnerability. So don’t download more data than necessary to demonstrate it, and do not view, delete, or modify data belonging to others.
• Not share the issue with others until it has been resolved, and delete any confidential information obtained through the vulnerability once the issue is fixed.
• Not perform attacks on physical security, social engineering, DDoS, spam, or use third-party apps.
• Provide sufficient information for us to reproduce and solve the issue. Usually, an IP address or URL and a description of the problem is enough. For more complex issues, additional details may be required.

What we promise:

• We will respond to your report within three working days with our assessment and a timeline for resolution.
• If you follow the rules above, we will not file a report or take legal action.
• We will treat your report confidentially and will not share your personal details without your permission, unless legally required. You may also report anonymously or under a pseudonym.
• We will keep you informed on the progress of resolving the issue.
• As a token of appreciation, we offer a reward for each report of a security problem we were not yet aware of. The size of the reward depends on the severity of the issue and the quality of your report.

We do our best to resolve all issues as quickly as possible!