servicedesk@sba.nl
StatusAlle systemen operationeel

Alle systemen operationeel

  • IT SupportOperational
  • WebapplicatiesOperational
  • Telefonie (3CX)Operational
  • Microsoft 365Operational
  • WerkplekbeheerOperational
  • Websites & hostingOperational
  • Cyber SecurityOperational
  • Invitat.ioOperational
  • NarrowcastingOperational
  • IT ReisbrancheOperational
See all incidents on noc.sba.nl →
088 340 0047Need support?

Good morning

Legal

Coordinated Vulnerability Disclosure

Found a vulnerability? Report it responsibly — we respond within 3 working days.

New for you

Not read yet since you were here

The site keeps an anonymous record of which pages you opened; this is the newest that was not among them.

From the blog · September 4, 2026Innovations within the travel industry: the power of collaboration between SBA and Uniglobe Alliance TravelIn a world where technology is evolving at lightning speed, collaborations focused on innovation are essential to providing customers with the best possible experience. At SBA,…PageCustomer PortalYou set the employee to active. At that same moment the portal creates the account, the mailbox, the groups, the MFA and the licence. No ticket,…PageCustomer story — Rotterdamse ZakenA growing network calls for a solid foundation: a custom CRM system for Rotterdamse Zaken.

Responsible disclosure

At SBA, we attach great importance to the security and reliability of our IT solutions and web applications. Despite our efforts to implement security measures, vulnerabilities may still occur in our systems. We would like to ask experts, customers, and other stakeholders to report discovered vulnerabilities to us in a responsible manner. This policy describes how we handle reports of vulnerabilities.

Our promise

Upon receipt of a report of a potential vulnerability, we commit to the following actions:

  • Speed: We will confirm the notification within 3 working days.
  • Evaluation: We will investigate and validate the reported vulnerability.
  • Transparency: We keep the reporter informed of progress and provide an indication of the expected resolution time.
  • Resolution: Once the vulnerability is confirmed, we will work on an appropriate solution to mitigate or resolve it.

Report it here

Found a vulnerability in one of our IT services or web applications? Report it directly through this form. Your name and e-mail address are optional: anonymous reports are welcome. Describe the vulnerability as concretely as you can, with the steps to reproduce it and the impact you see; supporting evidence such as screenshots or log files can follow by mail.




    Melden mag anoniem. Laat je een e-mailadres achter, dan gebruiken we dat alleen om over deze melding terug te koppelen.

    Prefer e-mail? That works too: send your report to servicedesk@sba.nl with the subject “Coordinated Vulnerability Disclosure”.

    What we expect from you

    To ensure that vulnerability reporting is done in a safe and responsible manner, we ask you to:

    • No Disclosure: Not to disclose the vulnerability until we have implemented a fix and you have given permission to share the information.
    • Restrictions: Not to access third-party data, not to make changes to the system, and not to disrupt our services.
    • Legal compliance: Not to exploit vulnerabilities in violation of the law, for example by using social engineering or physical attacks.

    Disclaimer

    This Coordinated Vulnerability Disclosure is not intended as an invitation to conduct penetration tests or other security research without prior consent. Following our Coordinated Vulnerability Disclosure policy means you are acting with good faith, and we will not take legal action against researchers who follow this policy. We appreciate your help in protecting the safety and privacy of our customers. Your efforts help us improve our products and services. If you have any questions about this policy, please contact us at servicedesk@sba.nl

    Secret Link