Responsible disclosure
Found something? Please tell us.
We value reports from security researchers and from anyone who notices a problem with our website or systems.
How to report
Send an email.
Please write to support@vnet.nz with “Security report” in the subject line. Tell us what you found, how to reproduce it, and what the impact could be. A machine-readable version of this contact is available in our security.txt.
Guidelines
Please act in good faith.
- Test only as much as is needed to demonstrate the issue
- Do not access, change or delete data that belongs to others
- Do not run denial-of-service, spam or social engineering tests
- Give us reasonable time to fix the problem before making it public
- This policy covers VNET's own website and systems, not our clients' systems
From our side
What you can expect.
- We will acknowledge your report and keep you informed of progress
- We will not pursue action against people who follow these guidelines in good faith
- We will credit you if you would like, once the issue is resolved
- We do not currently run a paid bug bounty
Start a conversation
Tell us what you are trying to do.
A few plain sentences are enough. Send us the problem, the deadline if there is one, and what has already been tried. We will tell you honestly whether we are the right people to help.
Get in touch support@vnet.nz