DIVD (Dutch Institute

DIVD is a Dutch non-profit foundation dedicated to vulnerability disclosure and internet security research. Founded in September 2019 by ethical hacker Victor Gevers along with other cybersecurity professionals, the organization operates with a volunteer team of over 130 skilled individuals working to make the digital world safer. The organization's core function is carried out through its Computer Security Incident Response Team (CSIRT), which scans the internet for vulnerabilities, discovered either by DIVD's own researchers or reported by third parties, and notifies affected system owners. DIVD also warns organizations about leaked credentials and operates a CVE Numbering Authority (CNA) capability, allowing it to independently assign CVE numbers and update CVE records for vulnerabilities within its scope. DIVD's research teams conduct vulnerability research alongside their regular jobs, following a Code of Conduct that governs responsible disclosure practices. Since its first case in January 2020 involving Citrix vulnerabilities affecting 546 potential victims in the Netherlands, DIVD has expanded its case work significantly, notifying tens of thousands of potential victims worldwide. Beyond the core CSIRT function, DIVD has grown into a family of related initiatives including DIVD Academy (training ethical hackers and young talent), CSIRT.global (a global volunteer network addressing overlooked vulnerabilities), DIVD Fund, DIVD Charity, and DIVD Club (youth education in cybersecurity). DIVD operates as a non-profit relying on volunteers, partners, and donations rather than commercial revenue.