A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Our security address
Contact: mailto:cert@speakup.nl

# Canonical URLs
Canonical: https://speakup.nl/.well-known/security.txt
Canonical: https://beyondvoice.fm/.well-known/security.txt

# Our PGP key
Encryption: https://speakup.nl/files/speakup-cert.asc

# Languages we speak
Preferred-Languages: nl, en

# Policy
Policy: https://speakup.nl/documenten/20210421_responsible_disclosure_bij_Speakup.pdf

# Come join us!
Hiring: https://speakup.nl/vacatures/

# We should renew this file before
Expires: 2026-01-09T22:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=yY5C
-----END PGP SIGNATURE-----