This articles explains the steps to report a security incident with Invantive software or Invantive.
Instructions
Please do not provide sensitive details until a secure communication channel has been established.
Execute the following steps:
-
Either call +31 88 00 26 598 or send an email to security@invantive.com.
-
Opening hours: 9:00 - 17:00 CET Monday till Friday.
-
Always mention your phone number, your email address and a short description.
-
For urgent security incidents please send an email or call with caller ID enabled outside of the opening hours. You will be called back as soon as possible.
-
We use the NCSC threat matrix to classify a reported incident. We use the NCSC’s Responsible Disclosure Guideline as a basis for our policy.
-
You will always receive a acknowledgement of receipt within one business day.
-
We ask you not to share information about the security incident with others until Invantive has had sufficient opportunity to resolve the problem and users have had sufficient opportunity to use a possibly updated version of the software.
-
We ask you to not further use any knowledge of the security incident and to omit any actions made possible after the existence of the security problem.
If you are not satisfied with the handling, we would like to ask you to contact the NCSC.