Security Policy

Reporting Security Issues

If you discover a security vulnerability in dotnetzuid.nl or related infrastructure, please report it by emailing info@dotnetzuid.nl instead of using public issues.

What to Include 📃

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if you have one)

Our Commitment 🧑‍💼

• We acknowledge receipt within 48 hours
• We'll investigate and provide updates as we progress
• We aim to patch critical issues within 2 weeks
• We request you keep the issue confidential until we've patched and released a fix

Scope

This policy applies to:

• https://www.dotnetzuid.nl and subdomains
• Official .NET Zuid social media accounts and communications
• Website infrastructure and services we directly control

Out of Scope

We don't cover:

• Third-party services (GitHub, npm, social media platforms themselves)
• Volunteer member personal accounts or devices
• Social engineering or phishing attacks
• DDoS testing or performance testing
• Physical security

Safe Harbor

Good-faith security research conducted per this policy will not result in legal action or service disruption, we might even invite you to talk about the found issues at one of our next events.

Supported Versions

• Current website is continuously deployed
• We support only the latest version running at dotnetzuid.nl

Recognition 🎉

We appreciate security researchers who help improve our security.
We'll acknowledge your contribution (with your permission) in our security updates.