Website Security Policy

The Municipality applies access controls, encrypted connections, security logging, input validation, backups, and controlled software updates to protect its website and public services.

Responsible reporting

If you believe you have found a vulnerability, do not access, alter, download, or disclose personal data; disrupt a service; use destructive testing; or publish the issue before it has been investigated.

Report the affected address, a clear description, reproduction steps, and your contact information through the contact page. Mark the subject as “Website security report.” Do not include passwords, access tokens, or personal data in the initial message.

Scope and authorization

This policy does not authorize security testing. Testing requires prior written authorization from the Municipality and, where applicable, its hosting provider or DICT/GWHS.