Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

digital-flanders-vulnerability-disclosure-program

YesWeHackView on YesWeHack
RawAI Enhanced
6
In Scope
10
Out of Scope
In-Scope Assets (6)
AssetCategoryBountyQuick Links
*.vlaanderen.beURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://beta.gastwebsite-acm.burgerprofiel.ext-vlaanderen.beURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://beta.gastwebsite.burgerprofiel.ext-vlaanderen.beURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://beta.widgets.burgerprofiel.dev-vlaanderen.be/URLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://burgerprofiel.beta-vlaanderen.beURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://vo-gebruikersbeheer.vlaanderen.beURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Out-of-Scope Assets (10)
AssetCategoryBounty
- opibus*.onderwijs*.vlaanderen.beOTHERNo
Newly onboarded systems may have a blackout window (up to six months).OTHERNo
Third-party/vendor-operated services (DV cannot authorize testing on systems not owned or operated by us).OTHERNo
bibis*.vlaanderen.beOTHERNo
cdn.vlaanderen.beOTHERNo
codex.opendata.api.vlaanderen.beOTHERNo
ets*.omgeving.vlaanderen.beOTHERNo
https://www.vlaanderen.be/aanmelden/help/mail.html (and ?*)OTHERNo
https://www.vlaanderen.be/vlaamse-overheid/contact/stuur-een-e-mailOTHERNo
natura2000.vlaanderen.beOTHERNo
Scope Changes (16)
Apr 16, 2026
ChangeAssetCategoryScopeTime
Added*.vlaanderen.beURLIn Scope18:33
Addedhttps://beta.gastwebsite-acm.burgerprofiel.ext-vlaanderen.beURLIn Scope18:33
Addedhttps://beta.gastwebsite.burgerprofiel.ext-vlaanderen.beURLIn Scope18:33
Addedhttps://beta.widgets.burgerprofiel.dev-vlaanderen.be/URLIn Scope18:33
Addedhttps://burgerprofiel.beta-vlaanderen.beURLIn Scope18:33
Addedhttps://vo-gebruikersbeheer.vlaanderen.beURLIn Scope18:33
Addedthird-party/vendor-operated services (dv cannot authorize testing on systems not owned or operated by us)OTHEROut of Scope18:33
Addednewly onboarded systems may have a blackout window (up to six months)OTHEROut of Scope18:33
Addedbibis*.vlaanderen.beOTHEROut of Scope18:33
Addedcdn.vlaanderen.beOTHEROut of Scope18:33
Addedcodex.opendata.api.vlaanderen.beOTHEROut of Scope18:33
Addedets*.omgeving.vlaanderen.beOTHEROut of Scope18:33
Addedhttps://www.vlaanderen.be/aanmelden/help/mail.html%20%28and%20?*)OTHEROut of Scope18:33
Addedhttps://www.vlaanderen.be/vlaamse-overheid/contact/stuur-een-e-mailOTHEROut of Scope18:33
Addednatura2000.vlaanderen.beOTHEROut of Scope18:33
Added- opibus*.onderwijs*.vlaanderen.beOTHEROut of Scope18:33