A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@exonet.nl
Expires: 2026-01-01T00:00:00.000Z
Encryption: https://www.exonet.nl/pgp.txt
Preferred-Languages: nl, en
Canonical: https://www.exonet.nl/.well-known/security.txt
Policy: https://www.exonet.nl/coordinated-vulnerability-disclosure
Policy: https://www.exonet.nl/en/coordinated-vulnerability-disclosure
Hiring: https://www.exonet.nl/vacatures/

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEECPfVTmH/+QKfXOWY7Abxc3gZ4DoFAme4T7gACgkQ7Abxc3gZ
4Do2HA/9HLEA6foXFXtHZfn3s5CMr0Kh8XnT0JykwH+LWu9iKezLp0vIfunQLqAo
S7RpZ4zxqj1z1J0XdEtpiBSTC4pWePSxLxtQuACKyqpT3OPjWiRRDN5sMl6yUYVp
WBhvb+J/XH1tlp7KwPsJMS2mvlHWX84FQcS+Wnr1BhvzxS0WYjR4vmvOt2xgNAwE
OqSwI+Sx8WOQddRXUhlwVQjU0Qtke49HKfmM7XfHt7nnJ2f8xtZLHcoE3/f2Hi27
orSmYZfX/U4ck4fPGLPbNefj7olEVrH5hTZYmI0u9/hP+OQX3mweGibc27gRIt9v
nQERtdqZspsMhG9sOFGgQ9PsUdH0qJB+RWWtt8Lp3NlKsgDJSzUpyGgSwUlzrsu7
c5ul/Y9wk6Us+zdafIKvx5RHLaphxzJiHbM3dD9VLqYDbmCspPEr+iij8OXFkvI2
BjCSS0ar0sDD9XRB1LGXstEhCzfXk+wh5PDao4GP7XJ1R8cbQABAf9NYkkRyAzZ3
nzWMpmieYUUNK8be6JfZvDbpRzbGQzvLrR0HjsVEtMVmL3cAbnouOSsqJa2Z1hKE
kRtyuul7OVeDER9c+b2CRQhSf/8ntxlJhisYYvs10PsiyBOZxkS8Afmfd8d/EzDt
REZ6qf9YSvgH/P2Ewpq6hzYTHUGYQOKoOsHE8tVJLWhL31NXY/I=
=o1MJ
-----END PGP SIGNATURE-----