A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



Contact: mailto:security@nso.eu

Expires: 2025-01-01T11:00:00.000Z

Encryption: https://www.nso.eu/.well-known/pgp-key.txt

Preferred-Languages: nl, en

Canonical: https://www.nso.eu/.well-known/security.txt

Policy: https://www.nso.eu/kwetsbaarheid-melden

Hiring: https://www.nso.eu/werken-bij-nso

-----BEGIN PGP SIGNATURE-----



iQIzBAEBCAAdFiEEtjMe9/Dzb4ztoJ75tOthHsUkA+QFAmWUKFYACgkQtOthHsUk

A+QiZhAAuoxSkO/8t527oY1605RuXBvnTP8/7QI/byV3rnA0qnz3P0dgEKttDcp6

pSY+zVhqkXHsii4y/AbfwwUuG8yeEW2fb27/KP4901Nz9gwgvOZV979uAxuX2b4p

DXiXayuwuxU8cAIz/l762GrnKuU9IalLnq55S/swg58Y89dkcCsuwme8zi4g6QPc

HTaszWsYzDYaj0DveCOLNGgHlF9pDb8sR2JnZD0SPD/OQkLkrvA43gGDJ4zY0PEA

SBaz+caVEXySjAsdzWzMQcjewd52I9Zo/c3yG6x8eju0d1dOC5PuWEWHh0jC10a5

gJbhcDi6mwncT8SpA//9yCQinOr72IRhuvo0/QC+2a8uQxodnZ6lCodiUvkh3yht

wVHeN2XwX3nU3SbDohAUs+H3pA/HqVdmZNc/FNwQFZrSY2LDuU4YIcKn7hgju3wY

e6NvMzDrtj6ChkFp+VGQyrDnW6qm6ft08SPH0k+lhXAUJhyAtdthqAhzFsAmHHuH

LnpEPLXKvXzuNIL4UkXty4lyc8cTw2A7gTQDsInnI9LrIQjZPlOe0B362XuJ+qNj

8CxZyYCIXwDiE6rHLf6PVKoe5wrlkpUtX31ROccNb15V5l2eGD85ZQkVJ0jaZ0i2

xWp4s0BpI7sxqetKek2tyHprhhcPk5HmA5VWqWxdP6gEsQZv6j0=

=b5CO

-----END PGP SIGNATURE-----