DIVD logo
About DIVD DIVD Community Security
Notification email

About DIVD

  • Who we are
  • What we do
  • The team
  • Contact
  • FAQ

DIVD Community

  • Contribute
  • Become a volunteer
  • Become a partner
  • Donate
  • Newsroom

Security

  • Code of Conduct
  • Code of Ethics
  • Why our work matters
  • Coordinated Vulnerability Disclosure
  • ANBI
  • CSIRT
  • Coen Zandstra
  • The Team >
  • Who we are >
  • Home >

Coen Zandstra

Researcher

CSIRT cases

  • DIVD-2026-00005 - Salesforce Experience Cloud – Data Exposure via Misconfiguration
  • DIVD-2026-00003 - Mendix Applications – Data Exposure due to Authorization Misconfiguration
Coen Zandstra

We aim to make the digital world safer by reporting vulnerabilities we find in digital systems to the people who can fix them. We have a global reach, but do it Dutch style: open, honest, collaborative, and for free.

Become a volunteer Become a partner

  • About

    • Who we are
    • What we do
    • The team

  • Security

    • Code of conduct
    • Security policy
    • ANBI

  • Stay up to date

    • Newsroom
    • Twitter
    • Github
    • Contact

Ethics at the base of everything we do

Since we handle sensitive data collected without informed consent, we've created this Code of Conduct to establish an ethical foundation for our work. This code can also be utilized by other researchers involved in what is currently known as responsible disclosure or coordinated vulnerability disclosure.

Code of conduct
Scanning from: AS50559 IPv4: 194.5.73.0/24 aka 194.5.73.0-194.5.73.255 - Our own local infrastructure
© 2026 DIVD. All rights reserved
Privacy