Found a vulnerability?

Did you find a weak spot in Well of Truth? Thank you for telling us. We take every report seriously.

How to report

• Email security@arcuhn.com
• Describe what you found and how we can reproduce it. A screenshot helps.
• You may write in Dutch or English.

What we do

• You get a reply within 2 working days.
• We fix a serious vulnerability within 2 working days, others within 7 days.
• We keep you informed and credit you if you want.
• We will not take legal action against anyone who reports in good faith and follows the rules below.

Please don't

• View, change or delete other people's data; stop as soon as you can show the vulnerability.
• Run attacks that take the service down, send spam or use social engineering.
• Make the vulnerability public before we have fixed it.

Technical contact details are also in security.txt