A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA384

#  ___  ________ _________  ___  ___     
# |\  \|\   ____\\___   ___\\  \|\  \    
# \ \  \ \  \___\|___ \  \_\ \  \\\  \   
#  \ \  \ \  \       \ \  \ \ \  \\\  \  
#   \ \  \ \  \____   \ \  \ \ \  \\\  \ 
#    \ \__\ \_______\  \ \__\ \ \_______\
#     \|__|\|_______|   \|__|  \|_______|
#                                        

#
# Stichting ICTU RFC 9116 security.txt
#

Expires: 2026-04-08T22:59:00.000Z

# Domeinen van Stichting ICTU en/of de Rijksoverheid kunnen met een 302-redirect verwijzen naar
# het centrale bestand op https://www.ictu.nl/.well-known/security.txt,
# omdat Stichting ICTU fungeert als het centrale meldpunt voor kwetsbaarheden en incidenten
# bij opdrachten die zij uitvoert voor de Rijksoverheid, en verantwoordelijk is voor de afhandeling
# van meldingen rondom deze domeinen.
#
# Domains of Stichting ICTU and/or the Dutch central government may use a 302 redirect
# to point to the central file at https://www.ictu.nl/.well-known/security.txt,
# because Stichting ICTU serves as the central point of contact for vulnerabilities and incidents
# related to assignments it carries out for the Dutch government, and is responsible for handling
# reports related to these domains.

# Canonical URIs ICTU
Canonical: https://ictu.nl/.well-known/security.txt
Canonical: https://www.ictu.nl/.well-known/security.txt

# The way to contact us:
Contact: mailto:securityalerts@ictu.nl

# We do *not* use OpenPGP, so do *not* use the key that was used to sign this
# security.txt file for sending us messages.
Encryption: https://www.ictu.nl/.well-known/Stichting_ICTU_0x5D771539_public.asc

# If you would like to report a security issue please first read our
# responsible disclosure policy:
Policy: https://www.ictu.nl/kwetsbaarheid-melden/

# We can offer you a swift and proper response in the following languages:
Preferred-Languages: nl, en

# If you think you'd like to join our team, please visit our job vacancy page:
Hiring: https://www.ictu.nl/werken-bij-voor

-----BEGIN PGP SIGNATURE-----

iJUEARMJAB0WIQRpISxOUjp+FPBgY51VQOubasFfgAUCZ/ZI7AAKCRBVQOubasFf
gIwPAX9+qa6tc8eQSjubMU607GkFVC0r+q0BWT2ltFJO3C90BOAxoqTL14gTsBD2
Go9YNfsBgMwTqUjAUvTg2gtk+rXhRSdBVkpQgomKXokMsOzHvN4hQijP/UCNWeq/
eDdfuFcQeA==
=BuiA
-----END PGP SIGNATURE-----