Security
Found a vulnerability? Report it
How to report
Email contact@nealvdv.be: what happened, at which address, and how to reproduce it. A screenshot helps. English, Dutch, French or German, whichever is easiest.
What happens next
A first answer comes within three working days. A serious problem is fixed as fast as possible, and the reporter hears when it is solved. If you like, we thank you by name.
Ground rules
Don't view, keep or change other people's data, don't take anything down (no overloading, spam or automated attacks) and don't make the problem public before it is fixed. Whoever sticks to this and reports in good faith has nothing to fear from us. A report can also go to the Centre for Cybersecurity Belgium (CCB), under the Belgian rules for ethical hacking.
What isn't covered
Problems with other services (the hosting, the payment provider, a mail program) belong to those services. Reports without real consequence, such as a missing setting that opens nothing, are welcome but don't get priority.
For software
The same details are also available in the form security tools read, at /.well-known/security.txt.
Updated on 21 October 2026.