Security

We welcome reports of vulnerabilities in the gateway. Please send details to security-54.911_report@kpnmail.net and give us a reasonable window to fix the issue before disclosing it. A machine-readable policy is published at /.well-known/security.txt.

Scope

The gateway API, the console and the MCP server are in scope. Third-party providers are not.

See also: Security overview.