Responsible disclosure

Found a security weakness in our website or systems? Please tell us, so we can fix it. Last updated: 19 October 2026.

How to report

Email your findings to info@bossagroup.nl. Describe the weakness, the steps to reproduce it and, if possible, the affected address. Please do not share the details with others until we have fixed it.

What we ask

Do not use the weakness more than needed to show it exists.
Do not access, change or delete data that is not yours.
Do not use social engineering, denial-of-service attacks, spam or physical attacks.
Do not place malware or make changes to our systems.

What we promise

We respond within 5 working days with our assessment.
We keep you informed until the issue is resolved.
We treat your report confidentially and will not take legal action if you follow these rules.
With your permission, we can mention your name once the issue is fixed.