Responsible disclosure
Security comes first at EDUos. Found a vulnerability in our systems anyway? Let us know and we’ll solve it together.
How to report a vulnerability
Email your finding to servicedesk@rostareduflex.nl. Describe what you found and how we can reproduce it. Leave your contact details if you’d like a reply.
What we ask of you
- Don’t exploit the vulnerability, and don’t view or copy more data than needed to demonstrate it.
- Don’t change or delete anyone else’s data.
- Don’t carry out attacks that disrupt the service, and don’t use social engineering or physical access.
- Don’t share the vulnerability with anyone else until it has been fixed.
- Report the vulnerability as soon as possible after finding it.
What we promise
- We respond within five working days with an initial assessment.
- We keep you informed of progress until the vulnerability is fixed.
- We treat your report and your details confidentially.
- If you follow these rules, we won’t take legal action against you.
- If you wish, we’ll credit you for the fix.
Not intended for
Reports without a demonstrable risk, such as missing settings on pages without sensitive data, or automated scan results without explanation. For questions about using EDUos Web, please contact the service desk.