Responsible disclosure
Do not use the general contact form for exploit details. Send vulnerability reports to security@cyberai.nl.
What to include
- A clear description of the issue and affected component.
- Steps required to reproduce the issue.
- Potential security impact.
- Any relevant evidence that does not expose third-party data.
Researcher conduct
Avoid privacy violations, service disruption, data destruction, social engineering and access beyond what is required to demonstrate the issue.
CyberAI response
CyberAI will acknowledge a valid report when operationally possible, assess the evidence and coordinate remediation and disclosure appropriate to the affected system.