In some cases, people acted in good faith and reported website vulnerabilities, but they were punished for doing so.
To avoid this, the New Zealand Internet Task Force encourages the adoption of responsible disclosure policies.
Customs guidance
We want to provide an environment where people who discover a problem with any of our websites are comfortable reporting it.
To encourage this, we have a guide on how we would like vulnerabilities reported. Customs and the reporter can work together to keep our websites, data, and information safe and secure.
Website vulnerability disclosure guide (PDF, 34 KB)