Alfen N.V. is a key player in the electricity grid, offering transformer stations, energy storage systems, and EV charging solutions. We are committed to the highest security standards, and your input is crucial for identifying and addressing vulnerabilities, ensuring safety and privacy. To better support our researcher community and improve our VDP structure, we are partnering with Intigriti for our responsible vulnerability disclosure program.
This is a responsible disclosure program without bounties.
Researchers are encouraged to submit information security reports for any publicly accessible assets, specifically corporate and brand sites (.alfen.com), associated with Alfen N.V.
All energy storage solutions and assets owned by Alfen N.V. are out of scope, and reports related to them will not be accepted.
All EV charging stations or assets owned by Alfen N.V. are out of scope and reports regarding them will not be accepted, except for the EVE product line within the UK market.
This program follows Intigriti's contextual CVSS standard
We currently don’t offer any credentials to test user roles.
For obvious reasons we can only allow submissions or applications for our program with a valid Intigriti account.
It will only take 2 minutes to create a new one or even less to log in with an existing account, so don't hesitate and let's get started. We would be thrilled to have you as part of our community.
