Security

Coordinated Vulnerability Disclosure Policy (CVDP)

At De Lijn, we regard the security and continuity of our online services as one of our top priorities. Our specialists are working constantly to optimise our systems and processes. However, despite all efforts to secure our systems, vulnerabilities may still be present.

We investigate all reports of security loopholes affecting our web presence, mobile operations and API (application programming interface: the software interface that allows two applications to communicate with each other).

Are you a security researcher? Do you think you have found a security threat/vulnerability? If so, please help us by reporting it so that we can work together to improve the security and reliability of our systems.

You can do this by sending a report of your findings to security@delijn.be, including all relevant information to enable us to reproduce and assess the issue.

Thank you for your support.

Information Security Team – De Lijn

Last updated: July 3, 2026