Vulnerability reporting

At Worldstream, the security of our systems is hugely important. But despite all security measures, vulnerabilities may still be present. If you discover a vulnerability on our website, we would like to know about it so we can take steps to rectify it as soon as possible. We describe below how you can help us better protect our customers and our systems.

If you wish to report a vulnerability, please do the following:

• E-mail the findings to our security team by clicking here. Encrypt the findings with our PGP key, to prevent this critical information from falling into the wrong hands;
• Make sure that the report is within this program, for which we refer you to the Worldstream website. Specifically, this is worldstream.nl and worldstream.com;
• Do not misuse the vulnerability or problem that has been discovered, for example, by downloading more data than necessary to demonstrate the vulnerability or by deleting or altering others’ data;
• Do not disclose the problem to others until it is resolved;
• Do not use the vulnerability to launch attacks on physical security, social engineering, distributed denial of service, spam, or third-party applications;
• Provide sufficient information so that the problem can be reproduced, allowing us to resolve it as soon as possible. Usually, the IP address of the affected system or a URL and a description of the vulnerability are sufficient, but for complex vulnerabilities, further explanation would be helpful.

What we promise: