Centric
Top 1M siteVDPActive RecognitionFull Safe Harbor
Program Details
Responsible disclosure policy for the Dutch IT services group. Findings go to [email protected], PGP encrypted, with enough detail to reproduce - usually the IP or URL of the affected system. Centric assesses reports within three working days, keeps them confidential, accepts pseudonymous reports and takes no legal action against reporters who follow the conditions. Reporters are named as the discoverer if they want, and any publication after the fix is agreed between both sides.
- Response SLA
- 3 business days
Rules & Testing
Excluded Methods
DosSocial EngineeringPhysical Access
Out of Scope
Third-party applications
Security
- PGP Key
- https://stccchostorageaccountprd.blob.core.windows.net/media/pgp-key.txt
- Preferred Languages
- English, Dutch
security.txt
- Contact
- mailto:[email protected]
- Encryption
- https://stccchostorageaccountprd.blob.core.windows.net/media/pgp-key.txt
- Policy
- https://www.centric.eu/nl/over-centric/trust-center/responsible-disclosure-policy/
- Hiring
- https://careers.centric.eu
- Languages
- en, nl
- Expires
- Jul 21, 2027