A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



# Domeinen van SURF kunnen met een 302 redirect verwijzen naar het

# bestand op https://www.surf.nl/.well-known/security.txt.

# Daarin staat het centrale meldpunt voor kwetsbaarheden en incidenten.

#

# SURF domains can use a 302 redirect to point to the

# file at https://www.surf.nl/.well-known/security.txt.

# That contains the central reporting point for vulnerabilities and incidents.



Policy: https://www.surf.nl/en/responsible-disclosure

Policy: https://www.surf.nl/responsible-disclosure



Contact: mailto:responsible-disclosure@surf.nl

Contact: https://www.surf.nl/en/responsible-disclosure

Contact: https://www.surf.nl/responsible-disclosure



Canonical: https://www.surf.nl/.well-known/security.txt



Preferred-Languages: nl, en



Encryption: https://keys.openpgp.org/search?q=responsible-disclosure@surf.nl



Acknowledgments: https://www.surf.nl/en/hall-of-fame-0

Hiring: https://werkenbij.surf.nl



Expires: 2026-02-01T16:49:00.000Z

-----BEGIN PGP SIGNATURE-----



iQIzBAEBCAAdFiEEAp0RVO6Yl02nZFUNl0BDxBrd1JMFAmeX29AACgkQl0BDxBrd

1JNEfhAAo/5Jm8WTq7z1x0ReqjP9t+PDcLpS3MFF6yZpAue2QIch01vb1bEOKEql

CbxaDyezk3yYBR+YxfPoeewxg+CIvmq3TxTd9aTt7+Hns1T8WUYM5O8qjYI+sezF

FGo/JziYqL675XKCd1uCybRy8ln8iXNlyHl7JY6LH5qohtWv1kL8JXzjg9s7ts4j

0Vflf+t0d3zFjDIfh89JCKS4MFXoQJe+vJVme+GkTX7WVdh/QwMG5Hiv2V5E2ipL

NeH7JVSdeimkssuIL4VWPflCxe+xweH1Nq2Ii5SlcHKu+N9oWpde1QKNSz5wEiTB

tfFwHmZlekKs1DbLf9ZQYPkQlvgg7bnlXHS9npZPqjseDEGNL9jCI/z6OeBf1FNv

mMjDjZ7hOCzbwxAimZqxVYJxXYin/E7f1sx9PDv2qAfoO6+rRfYE9aZnL2Cu98Rp

dFsP+YgDxQKdiLLMF6iW+xIvHSnU+4b/TuWgGr+dyHbtn0IpocdfsEp0ZMrI3bki

b3iGAF1ifuIw8uuqClPVXOpyAPzOxaWWhDjB4Nh9hmAvqfCdenjJU4D5oeHMZn+Z

hf1EgYpQt0FkBzFufQjwLhodgKXLK9kp4a59p2Yb0l7V79KASesf6rq9qiF5tG3i

Y/I2CWquw5ZwfxIMcd1zOdqkKgkligTtWMUpN+o5Up9uxKjgRE8=

=XHLt

-----END PGP SIGNATURE-----