Vulnerability Disclosure Policy

At Print Speak, ensuring the safety and security data is paramount. It underpins everything we do, and ensures we maintain the highest security standards across our products and services. We are committed to working with our customers, end users, partners, and other third parties to respond to legitimate reported security vulnerabilities. We encourage our community to participate in our responsible reporting process.

Reporting security issues

If you believe you have discovered a vulnerability in Print Speak or have a security incident to report, please send an email to security@printspeak.com.

Once we have received a vulnerability report, we will take a series of steps to address the issue:

• We will ask you to keep any communication regarding the vulnerability confidential.
• We will investigate and verify the vulnerability.
• We will address the vulnerability and through an update to the software. If for some reason this cannot be done quickly or at all, we will provide information on recommended mitigations.
• We will publicly announce the vulnerability in the release notes of the update. We may also choose to issue additional public announcements.

Release notes will usually include a reference to the person/people who reported the vulnerability, unless you would prefer to stay anonymous. We will endeavour to keep you apprised of every step in this process as it occurs.

When properly notified of legitimate issues, we’ll do our best to acknowledge your emailed report, assign resources to investigate the issue, and fix potential problems as quickly as possible.

When we discover vulnerabilities in another vendor's product through our own research, we take a series of steps to address the issue:

• We keep any communication confidential regarding the vulnerability until the completion of the disclosure process.
• We attempt to contact the appropriate product vendor by email and telephone.
• We provide the vulnerability details to the vendor.
• We work with the vendor to help them fix potential problems as quickly as possible.

We greatly appreciate the efforts of security researchers and discoverers who share information on security issues with us, giving us a chance to improve our products and services, and better protect our customers.