A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA512



# Domeinen van de Rijksoverheid kunnen met een 302 redirect verwijzen naar

# het centrale bestand op https://www.ncsc.nl/.well-known/security.txt

# omdat het NCSC het centrale meldpunt is voor kwetsbaarheden en incidenten

# voor de Rijksoverheid.

#

# Dutch central government domains can redirect to the central file located

# at https://www.ncsc.nl/.well-known/security.txt with a 302 redirect,

# because NCSC-NL is the central point of contact for vulnerabilities and

# incidents for the Dutch central government.



Policy: https://www.ncsc.nl/contact/kwetsbaarheid-melden

Policy: https://english.ncsc.nl/contact/reporting-a-vulnerability-cvd



Contact: https://www.ncsc.nl/contact/kwetsbaarheid-melden

Contact: https://english.ncsc.nl/contact/reporting-a-vulnerability-cvd

Contact: mailto:security@ncsc.nl



Canonical: https://www.ncsc.nl/.well-known/security.txt



Preferred-Languages: nl, en



Encryption: https://www.ncsc.nl/contact/pgp-key

Encryption: https://english.ncsc.nl/contact/pgp-key



Expires: 2023-01-31T22:59:00.000Z



-----BEGIN PGP SIGNATURE-----

Version: Encryption Desktop 10.4.2 (Build 1298)

Charset: utf-8



wsDVAwUBY0VVABypWqw/ZiuAAQrAuwv/S2tPc7XooGxTcGRaJpjcPjoBBokAGZGM

J2SjGu7JxdSqRaaltTPIoIFuUdABnORBbHvOcs2IaTe06vi7i9AO9wLDI9t/WHqM

qhxcCbzToug6+2AKxU/Ml5SSbRQJILdN23s4GZd7bsGmMURHxiBy135PGbNf6mrR

PuIGXLzIXscoH1PLnp/AAM/MdpCHDipaevRaTLp8b3UFFRmMCzNmtyNAzGnyHmmO

FAp6L4z6QksmfyLX56Kh1+nopUysvZSf8ksLD3zyU9RNXpsqpZSuh3NMMxolZeeY

n495ZolWWW/c0G+uG+FIzuYxmuJxLxUleUQYCJ3+mqOKC4XpAogW7vRAulPd33H1

cd398tOHrcXDF9kqd0yLt0iSyfMkfh1E4a4BY7tfymAA2kCPYrYLowd9uo7LHYGo

l3r33dVdlvWLa90U7b8bQaC+ll4uK9VBDIZIMeyv0pvyB/XXA7QeW4xN7R81+G39

Totuef10oqnYDh1vM+QJA7pdCZgaayMn

=Mglt

-----END PGP SIGNATURE-----