{"id":1574,"date":"2025-07-29T19:21:35","date_gmt":"2025-07-29T19:21:35","guid":{"rendered":"https:\/\/pinkelephant.nl\/verantwoordelijke-openbaarmakingsverklaring\/"},"modified":"2025-10-08T15:10:52","modified_gmt":"2025-10-08T15:10:52","slug":"responsible-disclosure-statement-2","status":"publish","type":"page","link":"https:\/\/pinkelephant.nl\/en\/responsible-disclosure-statement-2\/","title":{"rendered":"Responsible Disclosure Statement"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"1574\" class=\"elementor elementor-1574\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bf8a2c1 e-flex e-con-boxed e-con e-parent\" data-id=\"bf8a2c1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ed770ee elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"ed770ee\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInDown&quot;,&quot;_animation_mobile&quot;:&quot;fadeIn&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Responsible Disclosure Statement<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-43ab4d7 elementor-widget__width-initial elementor-widget elementor-widget-heading\" data-id=\"43ab4d7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">At Pink Elephant, we consider the security of our systems very important.  <\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-61614f6 elementor-widget elementor-widget-text-editor\" data-id=\"61614f6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Despite our care for the security of our systems, there may still be a vulnerability. If you have found a vulnerability in one of our systems, we would like to hear about it so that we can take action as soon as possible. We would like to work with you to better protect our customers and our systems.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a02f89d elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"a02f89d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69efbe9 elementor-widget elementor-widget-text-editor\" data-id=\"69efbe9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wrapper blok__wrapper row no-padding margin-bottom clearfix\"><div class=\"col s12 m10 offset-m1 l8 offset-l2\"><p><strong>We ask you to:<\/strong><\/p><div id=\"meer\" class=\"vc_row wpb_row vc_row-fluid maxwidth\"><div class=\"vc_row-wrapper\"><div class=\"wpb_column vc_column_container vc_col-sm-7\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><div class=\"wpb_text_column wpb_content_element\"><div class=\"wpb_wrapper\"><ul><li>send your finding to <a href=\"mailto:security@pinkelephant.nl\">security@pinkelephant.nl<\/a><\/li><li>not exploit the problem by, for example, downloading more data than necessary to demonstrate the leak, or viewing, deleting or modifying third-party data,<\/li><li>not to share the problem with others until it is resolved and to delete all confidential data obtained through the leak immediately after the leak is closed;<\/li><li>not use physical security attacks, social engineering, distributed denial of service, spam or third-party applications;<\/li><li>provide sufficient information to reproduce the problem so that we can resolve it as soon as possible. Usually, the IP address or URL of the affected system and a description of the vulnerability is sufficient, but more may be required for more complex vulnerabilities.<\/li><\/ul><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class=\"wrapper blok__wrapper row no-padding margin-bottom clearfix\"><div class=\"col s12 m10 offset-m1 l8 offset-l2\"><p>\u00a0<\/p><p><strong>We promise to:<\/strong><\/p><ul><li>respond to your report within 5 days with our assessment of the report and an expected date for resolution;<\/li><li>not to take any legal action if you comply with the conditions set by us regarding notification;<\/li><li>treat your report confidentially and we will not share your personal data with third parties without your consent, unless necessary to comply with a legal obligation;<\/li><li>keeping you updated on the progress of solving the problem;<br \/>if you wish, include your name as the discoverer in messaging about the reported problem;<br \/>solve the problem as soon as possible;<\/li><li>to be involved in any publication about the problem after it is resolved.<br \/><br \/><\/li><\/ul><\/div><\/div><div class=\"wrapper blok__wrapper row no-padding margin-bottom clearfix\"><div class=\"col s12 m10 offset-m1 l8 offset-l2\"><p><strong>Known false positives:<\/strong><\/p><div class=\"wpb_text_column wpb_content_element\"><div class=\"wpb_wrapper\"><p>When reporting potential vulnerabilities, consider realistic attack scenarios and the security impact of the behaviour. Below are the most common false positives we encounter. The following issues will be closed as invalid except in rare circumstances with a clear security impact.<\/p><\/div><\/div><div class=\"wpb_text_column wpb_content_element\"><div class=\"wpb_wrapper\"><ul><li>Fingerprinting \/ version banner disclosure on general\/public services<\/li><li>Disclosure of known public files, directories or non-sensitive information (such as robots.txt)<\/li><li>Clickjacking and problems that can only be exploited by clickjacking<\/li><li>Missing cookie flags on non-sensitive cookies<\/li><li>SPF and DKIM on domains other than true.co.uk.<\/li><li>DMARC problems<\/li><li>Missing DNSSEC (implementation in progress)<\/li><li>Self XSS<\/li><li>Same Site Scripting \/ Localhost DNS record<\/li><li>Problems due to outdated browser software<\/li><li>Known CVEs are excluded for a reasonable period of time after the public availability of a patch (usually 30 days).<\/li><\/ul><\/div><\/div><\/div><\/div><div class=\"wrapper blok__wrapper row no-padding margin-bottom clearfix\"><div class=\"col s12 m10 offset-m1 l8 offset-l2\"><div class=\"wpb_text_column wpb_content_element\"><div class=\"wpb_wrapper\"><p>\u00a0<\/p><p>The above text is an adapted version of Floor Terra's original Responsible Disclosure text and is published under a Creative Commons Attribution 3.0 licence. The original text can be found at <a href=\"https:\/\/responsibledisclosure.nl\/\" target=\"_blank\" rel=\"noopener\">responsibledisclosure.co.uk<\/a>.<\/p><p><a href=\"https:\/\/creativecommons.org\/licenses\/by\/3.0\/nl\/\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" class=\"alignnone size-full wp-image-39026\" src=\"https:\/\/www.true.nl\/wp-content\/uploads\/2017\/06\/cc-by.png\" alt=\"cc-by\" width=\"88\" height=\"31\" \/><\/a><\/p><\/div><\/div><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Responsible Disclosure Statement Bij Pink Elephant vinden wij de veiligheid van onze systemen erg belangrijk. Ondanks onze zorg voor de beveiliging van onze systemen kan het voorkomen dat er toch een zwakke plek is. Als je een zwakke plek in \u00e9\u00e9n van onze systemen hebt gevonden, horen wij dit graag zodat we zo snel mogelijk [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-1574","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Responsible Disclosure Statement - Pink Elephant<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/pinkelephant.nl\/en\/responsible-disclosure-statement-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Responsible Disclosure Statement - Pink Elephant\" \/>\n<meta property=\"og:description\" content=\"Responsible Disclosure Statement Bij Pink Elephant vinden wij de veiligheid van onze systemen erg belangrijk. Ondanks onze zorg voor de beveiliging van onze systemen kan het voorkomen dat er toch een zwakke plek is. Als je een zwakke plek in \u00e9\u00e9n van onze systemen hebt gevonden, horen wij dit graag zodat we zo snel mogelijk [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/pinkelephant.nl\/en\/responsible-disclosure-statement-2\/\" \/>\n<meta property=\"og:site_name\" content=\"Pink Elephant\" \/>\n<meta property=\"article:modified_time\" content=\"2025-10-08T15:10:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pinkelephant.nl\/wp-content\/uploads\/2025\/10\/image1a.png\" \/>\n\t<meta property=\"og:image:width\" content=\"895\" \/>\n\t<meta property=\"og:image:height\" content=\"596\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/pinkelephant.nl\\\/responsible-disclosure-statement-2\\\/\",\"url\":\"https:\\\/\\\/pinkelephant.nl\\\/responsible-disclosure-statement-2\\\/\",\"name\":\"Responsible Disclosure Statement - Pink Elephant\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/pinkelephant.nl\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/pinkelephant.nl\\\/responsible-disclosure-statement-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/pinkelephant.nl\\\/responsible-disclosure-statement-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.true.nl\\\/wp-content\\\/uploads\\\/2017\\\/06\\\/cc-by.png\",\"datePublished\":\"2025-07-29T19:21:35+00:00\",\"dateModified\":\"2025-10-08T15:10:52+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/pinkelephant.nl\\\/responsible-disclosure-statement-2\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/pinkelephant.nl\\\/responsible-disclosure-statement-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/pinkelephant.nl\\\/responsible-disclosure-statement-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.true.nl\\\/wp-content\\\/uploads\\\/2017\\\/06\\\/cc-by.png\",\"contentUrl\":\"https:\\\/\\\/www.true.nl\\\/wp-content\\\/uploads\\\/2017\\\/06\\\/cc-by.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/pinkelephant.nl\\\/responsible-disclosure-statement-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/pinkelephant.nl\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Responsible Disclosure Statement\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/pinkelephant.nl\\\/#website\",\"url\":\"https:\\\/\\\/pinkelephant.nl\\\/\",\"name\":\"Pink Elephant\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/pinkelephant.nl\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/pinkelephant.nl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/pinkelephant.nl\\\/#organization\",\"name\":\"Pink Elephant\",\"url\":\"https:\\\/\\\/pinkelephant.nl\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/pinkelephant.nl\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/pinkelephant.nl\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/pink_elephant_secondarycolour_strapline-copy.png\",\"contentUrl\":\"https:\\\/\\\/pinkelephant.nl\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/pink_elephant_secondarycolour_strapline-copy.png\",\"width\":1920,\"height\":466,\"caption\":\"Pink Elephant\"},\"image\":{\"@id\":\"https:\\\/\\\/pinkelephant.nl\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Responsible Disclosure Statement - Pink Elephant","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/pinkelephant.nl\/en\/responsible-disclosure-statement-2\/","og_locale":"en_GB","og_type":"article","og_title":"Responsible Disclosure Statement - Pink Elephant","og_description":"Responsible Disclosure Statement Bij Pink Elephant vinden wij de veiligheid van onze systemen erg belangrijk. Ondanks onze zorg voor de beveiliging van onze systemen kan het voorkomen dat er toch een zwakke plek is. Als je een zwakke plek in \u00e9\u00e9n van onze systemen hebt gevonden, horen wij dit graag zodat we zo snel mogelijk [&hellip;]","og_url":"https:\/\/pinkelephant.nl\/en\/responsible-disclosure-statement-2\/","og_site_name":"Pink Elephant","article_modified_time":"2025-10-08T15:10:52+00:00","og_image":[{"width":895,"height":596,"url":"https:\/\/pinkelephant.nl\/wp-content\/uploads\/2025\/10\/image1a.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/pinkelephant.nl\/responsible-disclosure-statement-2\/","url":"https:\/\/pinkelephant.nl\/responsible-disclosure-statement-2\/","name":"Responsible Disclosure Statement - Pink Elephant","isPartOf":{"@id":"https:\/\/pinkelephant.nl\/#website"},"primaryImageOfPage":{"@id":"https:\/\/pinkelephant.nl\/responsible-disclosure-statement-2\/#primaryimage"},"image":{"@id":"https:\/\/pinkelephant.nl\/responsible-disclosure-statement-2\/#primaryimage"},"thumbnailUrl":"https:\/\/www.true.nl\/wp-content\/uploads\/2017\/06\/cc-by.png","datePublished":"2025-07-29T19:21:35+00:00","dateModified":"2025-10-08T15:10:52+00:00","breadcrumb":{"@id":"https:\/\/pinkelephant.nl\/responsible-disclosure-statement-2\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/pinkelephant.nl\/responsible-disclosure-statement-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/pinkelephant.nl\/responsible-disclosure-statement-2\/#primaryimage","url":"https:\/\/www.true.nl\/wp-content\/uploads\/2017\/06\/cc-by.png","contentUrl":"https:\/\/www.true.nl\/wp-content\/uploads\/2017\/06\/cc-by.png"},{"@type":"BreadcrumbList","@id":"https:\/\/pinkelephant.nl\/responsible-disclosure-statement-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/pinkelephant.nl\/"},{"@type":"ListItem","position":2,"name":"Responsible Disclosure Statement"}]},{"@type":"WebSite","@id":"https:\/\/pinkelephant.nl\/#website","url":"https:\/\/pinkelephant.nl\/","name":"Pink Elephant","description":"","publisher":{"@id":"https:\/\/pinkelephant.nl\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/pinkelephant.nl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/pinkelephant.nl\/#organization","name":"Pink Elephant","url":"https:\/\/pinkelephant.nl\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/pinkelephant.nl\/#\/schema\/logo\/image\/","url":"https:\/\/pinkelephant.nl\/wp-content\/uploads\/2025\/06\/pink_elephant_secondarycolour_strapline-copy.png","contentUrl":"https:\/\/pinkelephant.nl\/wp-content\/uploads\/2025\/06\/pink_elephant_secondarycolour_strapline-copy.png","width":1920,"height":466,"caption":"Pink Elephant"},"image":{"@id":"https:\/\/pinkelephant.nl\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/pinkelephant.nl\/en\/wp-json\/wp\/v2\/pages\/1574","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pinkelephant.nl\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/pinkelephant.nl\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/pinkelephant.nl\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pinkelephant.nl\/en\/wp-json\/wp\/v2\/comments?post=1574"}],"version-history":[{"count":17,"href":"https:\/\/pinkelephant.nl\/en\/wp-json\/wp\/v2\/pages\/1574\/revisions"}],"predecessor-version":[{"id":2553,"href":"https:\/\/pinkelephant.nl\/en\/wp-json\/wp\/v2\/pages\/1574\/revisions\/2553"}],"wp:attachment":[{"href":"https:\/\/pinkelephant.nl\/en\/wp-json\/wp\/v2\/media?parent=1574"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}