A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA512



# Domeinen van de Rijksoverheid kunnen met een 302 redirect verwijzen naar

# het centrale bestand op https://www.ncsc.nl/.well-known/security.txt

# omdat het NCSC het centrale meldpunt is voor kwetsbaarheden en incidenten

# voor de Rijksoverheid.

#

# Dutch central government domains can redirect to the central file located

# at https://www.ncsc.nl/.well-known/security.txt with a 302 redirect,

# because NCSC-NL is the central point of contact for vulnerabilities and

# incidents for the Dutch central government.



Expires: 2024-01-31T22:59:00.000Z

Canonical: https://www.ncsc.nl/.well-known/security.txt



Policy: https://www.ncsc.nl/contact/kwetsbaarheid-melden

Policy: https://english.ncsc.nl/contact/reporting-a-vulnerability-cvd



Contact: https://www.ncsc.nl/contact/kwetsbaarheid-melden

Contact: https://english.ncsc.nl/contact/reporting-a-vulnerability-cvd

Contact: mailto:security@ncsc.nl

Encryption: https://www.ncsc.nl/contact/pgp-key

Preferred-Languages: nl, en



Acknowledgments: https://www.ncsc.nl/wall-of-fame

Hiring: https://www.werkenvoornederland.nl



-----BEGIN PGP SIGNATURE-----

Version: Encryption Desktop 10.4.2 (Build 1298)

Charset: utf-8



wsDVAwUBY+9c0P4Vd0fJc7lbAQpUmQwAwZ1vWyI1VKBChsciufRcvxy5zzMZMx6v

YjD5CXuDV4GL+tRl7wClnQO023e3ZChTH69y7O3veS+5/zNVUvpyqJfS8pNzG0pA

B4vea3fQ41t5UpCVYvPopIFiT1oeQJA9w4NqBD2+2jW5lS5L8k9xz192gWJvhxq8

mTukJXYDiJLzxKbUMHEG2GNaMeoRj5Pvgr8buzQELP0VZHfzF05Hr6NOoWvS6SRX

KGW6rgg6fEUPcMTjBqn6gL/w82FXwrh93AmYkP/sBWP4It3NpbiNuazc5iynhhih

+ZlfzsFV6agF4MZR0IQZ6X4jsCxKFrPIWW51/7W+PIDkqy6za/bDjDeiinid0HOC

2rro6N9FXSyxHz9nteMppd+YMTCt+Z67HONsssR+7ojxORGOs0rTcjUucaVikFJQ

wAls9p+vuIzFRViQaXe3Nndspr1cCIu4z3ZfdkcWREQP7acOjNgbmeQOlH4jnYWq

lNVMWzOncidAWM0nXcuYTjZagRAagthF

=yC4A

-----END PGP SIGNATURE-----