Legal
Responsible disclosure
Last updated 1 November 2026
Reporting a vulnerability
If you believe you have found a security vulnerability in any Kernhaven system, please report it to security@kernhaven.nl. Please include enough detail for us to reproduce the issue.
Our commitment
We will acknowledge your report within two business days, keep you informed of progress, and will not take legal action against researchers acting in good faith.
Out of scope
Denial-of-service attacks, social engineering and physical attacks are out of scope.