At fietsvierdaagsen.nl, we strive to keep our platform as smooth as a freshly paved bike path. However, even the best-maintained gear can develop a rattle. If you’ve discovered a security vulnerability, we want to hear about it so we can fix it before the next big tour.
The “No Flat Tires” Agreement (Safe Harbor)
If you follow the guidelines below, we promise not to take legal action against you or ask law enforcement to investigate. We view your help as a valuable contribution to the cycling community.
🛠 How to Report
Please send your findings to [security@fietsvierdaagsen.nl]. To help us cross the finish line quickly, your report should include:
- A clear description of the vulnerability.
- Steps to reproduce the issue (proof-of-concept scripts or screenshots are great).
- Potential impact (who or what is at risk?).
🚥 The Rules of the Road
To keep things fair and safe, we ask that you:
- Do no harm: Avoid deleting, modifying, or accessing data that doesn’t belong to you.
- No “Peloton” Attacks: Please do not perform DDoS attacks, spam, or social engineering against our staff or users.
- Privacy First: If you accidentally encounter personal data, stop and report it immediately without downloading or sharing it.
- Patience is a Virtue: Give us a reasonable amount of time to fix the issue before sharing it publicly.
🎯 In-Scope
*.fietsvierdaagsen.nl- Core registration systems and payment flows.
- User account security and data leaks.
🚫 Out-of-Scope (The Cobblestones)
- Physical security of our offices or event locations.
- Third-party platforms (e.g., social media plugins or external map providers), though we appreciate a heads-up if they affect us.
- Missing security headers that don’t lead to a direct exploit (e.g., “Best Practice” fluff).
🏆 The Reward
We are currently a community-focused platform, so we don’t offer massive cash “yellow jersey” prizes yet. However, for valid, high-impact reports, we offer:
- Public Recognition: A spot on our Hall of Fame (if you want it).
- Cycling Swag: Limited edition gear or event entries.
- The Warm Glow of Virtue: Knowing you’ve kept thousands of cyclists safe.