Report a security vulnerability
Have you found a suspected security vulnerability on Whistleblow.dk or in the Whistleblow application? Send a confidential report to Xigmatic ApS.
You can write in Danish or English. Please use the subject “Whistleblow security report”.
What to include
- The affected page or feature and when you observed the problem.
- Steps to reproduce it using your own test accounts and fictional data.
- The access or impact the problem could allow.
- How we can contact you with follow-up questions.
Do not include case content, personal information, passwords, tokens or encryption keys in your report. If technical evidence contains sensitive information, first ask us to agree on a secure way to share it.
Investigate with care
Only test systems and accounts you own or have explicit permission to test. This reporting channel does not itself authorize security testing. Avoid service disruption and changes to other people's data. Stop investigating and contact us if you unintentionally access customer data.
After your report
We review reports and follow up if we need more information. Coordinate disclosure with us so we can investigate and address the vulnerability before details are shared publicly.
This channel is for technical security problems in the platform. Whistleblower reports should be submitted through the relevant organization's reporting portal.