A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Acknowledgments: https://www.kpn.com/kpn-cert-en/hall-of-fame-en.htm

Contact: https://www.kpn.com/algemeen/missie-en-privacy-statement/security-vulnerability/report-security-vulnerability.htm
Contact: mailto:cert@kpn-cert.nl

Encryption: https://www.kpn.com/kpn-cert-en/pgp-key.htm

Canonical: https://www.kpn.com/.well-known/security.txt

Preferred-Languages: en,nl

Hiring: https://jobs.kpn.com/option/expertises/security

Expires: 2026-01-31T23:59:59.999Z
-----BEGIN PGP SIGNATURE-----

iQFFBAEBCgAvFiEE/3aiEBhOaB/1RbjbHZ9PUArVuMQFAmdlQu0RHGNlcnRAa3Bu
LWNlcnQubmwACgkQHZ9PUArVuMSN6Qf/dejyYsZ2c4XlwROia+79u+blG1dQNWLz
wMzMClRyMX0EZ0Q6WJHr+kZxn6f+MV4llDdOcXkdJcrS4P/xhJ85kj2/NiBBOiOd
kInzo4TQSuH392qjTLbxvhDpn6opJPW6JDuhnR8ziissmygBY1mrcb+HZJyku6EA
AxzO4hNDiIfh/2uMtCoMYbHPwKHz8kol9Bh/5+NOjiSVFAQEds9NuOWZzdZna3zW
WQueeoXumsYxYY3VqemDYECkO+XQPOXUDLp3ui3vh5zsKxeThp7EWnmm+SSUxH/o
KnYm/5szo74gPNR0dELAtl/0HqIRtT8byc6TIr9RGyor3wApTT/3IQ==
=qbSB
-----END PGP SIGNATURE-----