24/7 support for security incidents

SURFcert provides your institute with security-incident support 24 hours a day, 7 days a week. SURFcert also provides you with tools to optimise security within your institute yourself. For example, SURFcert is continuously minimising the nuisance of DDoS attacks.

Incident response

Institutes connected to the SURFnet network can make use of the SURFcert incident response service 24 hours a day, 7 days a week. Institutes report security breaches (incidents) to SURFcert, who will keep your institute informed of the progress of the incident, and provide any necessary advice on how to resolve it. SURFcert has been accredited by FIRST.

Optimising institutional security

SURFnet also works with institutions to optimise security using tools and other resources.

DDoS protection

SURFcert helps to prevent DDoS attacks and to minimise their impact. For better protection of your institution. More about DDoS protection

TRANSITS training programme

SURFacademy offers twice-yearly training for new and existing institutional CERT members. More about TRANSITS

SCIRT (SURFnet Community of Incident Response Teams)

An operational security working group, with a focus on incident management. More about SCIRT

OZON cyber crisis exercise

Every other year SURF organises the nationwide OZON cyber crisis exercise. More about the OZON cyber crisis exercise (in Dutch)


AIRT is a workflow application used by SURFcert to record and forward security breaches and incidents to institutes. More about AIRT

Colour code Information-Sharing Traffic Light Protocol

We use the Information-Sharing Traffic Light Protocol to exchange informatio on data security. More about Information-Sharing Traffic Light Protocol

CVPO (CERT-formation process support)

SURFnet supports institutes in the setup and training of local Company Emergency Response Teams (CERTs).


Netflow is a service that analyses data on traffic to and from the institute, in order to detect network attacks at an early stage and limit the damage caused.

Who can use SURFcert?

SURFcert is available to institutes connected to SURFnet.

Contact information

Telephone: +31-887873000 - during office hours

Alarm number - 24 hours a day, 7 days a week:  +31-622923564

Postal address:
SURFnet bv
Postbus 19035
3501 DA Utrecht

Public PGP-key
Use the public SURFnet-CERT PGP key to send confidential messages to SURFnet-CERT and to verify the digital signature from SURFnet-CERT.

Operational information

This service is included in SURFnet's core package.

Latest modifications 06 Dec 2018

More information