A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:info@jannesmannes.nl
Expires: 2025-11-30T22:31:41+00:00
Encryption: https://jannesmannes.nl/pgp-key.txt
Preferred-Languages: en, nl
Canonical: https://hizkia.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEENOVgJxu5xp6kDGG1AQXjPNd3AWcFAmdLkk0ACgkQAQXjPNd3
AWf+Xg//TIU0raRZOvCVzJdT/8FDTSu/XcHw4/AP1ky1LW219BGEiZh93ubuPHHX
gc8m/xPNNbhky5ky5AsQnUWz5AAcOEp73NcYtjSDKue3ZB8UohemAMCPWbEqPjgS
dbfGg4w0rYjMgbgIYxHluccIYLe3h2cwhG8aOV7lFo+4HRcgIdvDjDU0uSvGJrhY
/pleSNqUcrJKlhLnN56tdDy3UUuWueYnGa2ucWcpfsFEfobVh+6wsww+relZHrke
W7M/TKfVNRhW2JsqPVLLyWjpv99UJZfd53ukegkrz/2ophS3YVnli4ioIBa/bPTL
pDuGOsLDXlPMw7o7YsAoGZU4PjBle1f8Kl4k41dlDks/X6ubcxSsNq7QaaeQr29K
yEX57q9JhC+O7dzwa5Sx+0ymfj2FRMfd8itxmuPQ+RcWXV0jRzqOA53d37w32t9Q
dd8YCUxQI78M0MP2sKnTehZtnX3nw5cXYfhhdtBYV+n9GWYQbxJJUHXJHyd5UYb3
JpheW33Cty3SMlLF/FBX6OlyYiKrQzPPmTVIlk64mnBg61c0pD3E/tU3PDizwcHO
fJwvlhigczofsExJTFIJWln0LSnT+yzP6Me6ftH/n642b5eTSMZOUNaxTKMDFaRC
eHO+pLQNnmnwSAAdp7en74ucdLwJCoDCZnyKEaavnJaBu2W0Jyk=
=UhJm
-----END PGP SIGNATURE-----