Here are a few of the companies and organizations where I have found vulnerabilities.
- Security Battle Rijksoverheid (CTF) 2019
- NXP Responsible Disclosure 4x
- Open Universiteit Responsible Disclosure
- Pathé Responsible Disclosure 3x
- NS Responsible Disclosure
- Harvard University Responsible Disclosure 4x
- University of Oxford Responsible Disclosure 1x
- Ahold Delhaize Responsible Disclosure 4x
- MediaMarkt Responsible Disclosure
- Hema Responsible Disclosure 2x
- Trajectplanner Responsible Disclosure 7x
- Onderwijsonline Responsible Disclosure 3x
- Leids Universitair Medisch Centrum 1x
- Testjeleefstijl Responsible Disclosure
- Tweakers Responsible Disclosure 3x
- Audi Responsible Disclosure
- Tradingview Responsible Disclosure
- Joomla Responsible Disclosure CVE
- Joomla Responsible Disclosure CVE
- Joomla Responsible Disclosure CVE
- BenQ Responsible Disclosure
- ItsLearning Responsible Disclosure
- MSI Responsible Disclosure
- Gemeente Hoorn Responsible Disclosure
- Gemeente Olst-Wijhe Responsible Disclosure
- Albert Heijn Responsible Disclosure
- Megekko Responsible Disclosure 2x
- IKEA Responsible Disclosure
- Thuisbezorgd Responsible Disclosure 3x
- Aon Responsible Disclosure
- Open Universiteit Responsible Disclosure
- S-BB Responsible Disclosure
- Cinemaroma Responsible Disclosure
- Mercedes-Benz Responsible Disclosure
- Universiteit Twente Responsible Disclosure
- Erasmus Universiteit Rotterdam Responsible Disclosure
- Universiteit Leiden Responsible Disclosure
- Van der Valk Hotel Responsible Disclosure
- Hogeschool van Arnhem en Nijmegen Responsible Disclosure 6x
- Bol.com Responsible Disclosure
- Belastingdienst Responsible Disclosure 2x
- Ministerie van Onderwijs, Cultuur en Wetenschap Responsible Disclosure 3x
- Ministerie van Economische Zaken en Klimaat Responsible Disclosure 8x
- Ministerie van Volksgezondheid, Welzijn en Sport Responsible Disclosure 4x
- Ministerie van Binnenlandse Zaken en Koninkrijksrelaties Responsible Disclosure 6x
- Ministerie van Infrastructuur en Waterstaat Responsible Disclosure 13x