A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



# Domeinen van SURF kunnen met een 302 redirect verwijzen naar het

# bestand op https://www.surf.nl/.well-known/security.txt.

# Daarin staat het centrale meldpunt voor kwetsbaarheden en incidenten.

#

# SURF domains can use a 302 redirect to point to the

# file at https://www.surf.nl/.well-known/security.txt.

# That contains the central reporting point for vulnerabilities and incidents.



Policy: https://www.surf.nl/en/responsible-disclosure

Policy: https://www.surf.nl/responsible-disclosure



Contact: mailto:responsible-disclosure@surf.nl

Contact: https://www.surf.nl/en/responsible-disclosure

Contact: https://www.surf.nl/responsible-disclosure



Canonical: https://www.surf.nl/.well-known/security.txt



Preferred-Languages: nl, en



Encryption: https://keys.openpgp.org/search?q=responsible-disclosure@surf.nl



Acknowledgments: https://www.surf.nl/en/hall-of-fame-0

Hiring: https://werkenbij.surf.nl



Expires: 2025-02-01T08:41:00.000Z

-----BEGIN PGP SIGNATURE-----



iQIzBAEBCAAdFiEEx+UAcV2vAnlXktoQ28SD+5kMZ9IFAmWqfb4ACgkQ28SD+5kM

Z9IPFg/9H2/NnGZovW58VToJRIJF5KvWpOdQ6RYrxxf3c+jKR7asqdCW+MTHT8fY

xLwKSnurmzdi0YcpMH5x6yT5GDu1pPC9FkiiyPmnIaHOV2aB9wKa9fZE/mMLEL4X

6Wtf+fMeJAzjZePpnHZ74+E4aSvoQnTmxFiEQcLkqiuLaPivV4WKv8uZ2h3Q6PwD

4xD3XuCViXsxq58A00VRVqDzijHyz/+vQsHikkzGnXEfsodyJgYHfgbDCn8xdyJ9

bC3oU9/Sma1fThDwem+zU1TMLdMMRu9jx1iigMvSUHcQp8E8ix5CXuckxc95uM+2

0z1nh6zaQqUhhpLKipsLCsB4ADqgwshNIvTUHsFBtLtNlQwcCUvIGFOzR4RvoQXw

RHkjGOboOUvmTF4719PLyzQq6SA3VZmrX1PKooqwi5EUHw5GSKODxyfQeqe5W0TX

n7TYNevce1l2P6dX7I0N+iZZPP5XNNxfh6mYzODwz6H4ps55Tzlchv08YKclObOB

DmpgaUSVq02IeUqKz1taMbFfyOexLdV7UqSYjMHE/C0vS8PfMA7s+J+gUpFqaPXR

K95euM84B3RznEEy2PL7ZbYEDUMNa1bxqrPvRasxAFR8U4xsETnvkN8z1GZFf9J+

+rkW7vyl/WRDP5Kha676SShbMLuHumsA1+SlPno/zdrrKSUVUNo=

=+xef

-----END PGP SIGNATURE-----