Security
Een kwetsbaarheid gevonden? Mail ons. · Vous avez trouvé une vulnérabilité ? Écrivez-nous.
Reporting a vulnerability
Email security@othus.be. Please include what you found, how to reproduce it, and where you saw it. Dutch, French or English are fine.
What happens next
| 2 working days | We confirm we received your report. |
| 10 working days | We tell you whether we can reproduce it and how serious it is. |
| Fix released | We tell you, and credit you if you want. |
Please keep the issue private until a fix is out, or for 90 days, whichever comes first.
Updates
Security fixes are rolled out to every installation. We provide security updates for at least 5 years after a release.
Reporting obligation
Under the EU Cyber Resilience Act (art. 14), othus reports actively exploited vulnerabilities and severe incidents through the ENISA Single Reporting Platform and informs affected customers directly.