A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Our security address
Contact: mailto:cert@speakup.nl

# Canonical URLs
Canonical: https://speakup.nl/.well-known/security.txt
Canonical: https://labs.speakup.nl/.well-known/security.txt
Canonical: https://developer.speakup.nl/.well-known/security.txt
Canonical: https://beyondvoice.fm/.well-known/security.txt

# Our PGP key
Encryption: https://speakup.nl/files/speakup-cert.asc

# Languages we speak
Preferred-Languages: nl, en

# Policy
Policy: https://speakup.nl/files/20210421_responsible_dsiclosure_bij_Speakup.pdf

# Come join us!
Hiring: https://speakup.nl/vacatures/

Expires: 2024-03-14T22:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=RWXZ
-----END PGP SIGNATURE-----