Ethical hacking & NN Group’s Responsible Disclosure Policy
NN Group N.V. and its subsidiaries (hereafter NN Group) find it important that clients can use online services and applications safely and in a secure manner at all times. Despite our efforts to keep our IT systems secure, you may discover security vulnerabilities in our internet-facing IT environment.
Temporary pause of Responsible Disclosure submissions
NN Group has temporarily paused new submissions to its Responsible Disclosure programme as of 9 November 2026.
During this period, please do not submit new vulnerability reports. Reports submitted before 9 November will continue to be processed.
Exception for critical vulnerabilities: If you identify a critical vulnerability that poses an immediate risk to NN Group or its users, please report it to Responsible-Disclosure@nn-group.com.
We will use this time to improve how we manage and assess vulnerability reports, so that we can process submissions efficiently when the programme reopens.