Skip to main navigationSkip to main content
Central government logo, link to homepage
National Cyber Security CentreMinistry of Justice and Security

De Cyberbeveiligingswet treedt op 15 augustus 2026 in werking

Registreer je organisatie nu op MijnNCSC met eHerkenning of SSOnRijk. Meer over registreren

CVD Report Form

In the event you find a technical vulnerability in one of the Dutch Central Government's systems, you can report the identified vulnerability to the National Cyber Security Centre. This kind of report is known as a Coordinated Vulnerability Disclosure or CVD.

CVD's can be submitted via the form below. To prevent the data from falling into the wrong hands, you can encrypt the contents of your report using our PGP key. For more information about how we will process your CVD and what will be expected from you, please read our CVD policy before submitting your report. Our CVD policy also describes what kinds of vulnerabilities are within the scope of our activities.

CVD Policy

If you have a question or comment that does not relate to cyber security, please contact the Dutch Central Government.

Form

Which vulnerability do you wish to report?

Type of vulnerability
0 characters
0 characters
Only one file allowed, with a limit of 10 MB. Allowed types: doc, docx, xls, xlsx, ppt, pptx, pps, ppsx, txt, pdf.

Contact details

Please provide your contact details if you want us to be able to contact you.

CVD policy

For more information about how we will process your CVD and what will be expected from you, please read our CVD policy. Our CVD policy also describes what kinds of vulnerabilities fall within the scope of our activities.

Information about the processing of your personal data

We ask you to for some personal data in orde to communicate with you regarding your report. Providing a name and telephone number is optional. Your data will not be shared with third parties unless disclosure of these data is compelled by law or by a court ruling.