A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Please validate if you have the correct security.txt file before using the information below.
Canonical: https://www.sidn.nl/.well-known/security.txt
Canonical: https://www.sidnfonds.nl/.well-known/security.txt
Canonical: https://www.sidnlabs.nl/.well-known/security.txt
Canonical: https://registrars.sidn.nl/.well-known/security.txt

# Our security.txt file will be annually updated.
Expires: 2025-12-31T00:00:00z

# If you would like to report a security issue please first read our
#  Responsible Disclosure (RD) / Coordinated Vulnerability Disclosure (CVD) policy:
Policy: https://www.sidn.nl/cybersecurity/beveiligingslek-melden
Policy: https://www.sidn.nl/en/cybersecurity/reporting-a-security-breach

Contact: https://www.sidn.nl/cybersecurity/beveiligingslek-melden
Contact: https://www.sidn.nl/en/cybersecurity/reporting-a-security-breach
Contact: mailto:cvd@sidn.nl

# PGP public key of csirt[at]sidn.nl to verify the signature of security.txt
# Example: dig [openpgpkey-below] openpgpkey +multi +dnssec +noadditional
Encryption: dns:c726929cd6784c1e8e0266755a0e6769b99c4019b748db550170bdc0._openpgpkey.sidn.nl?type=OPENPGPKEY

# We can offer you a proper response in the following languages:
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
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=Hlc8
-----END PGP SIGNATURE-----