A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@misterdot.nl
Contact: https://www.misterdot.nl/contact/
Preferred-Languages: en, nl
Encryption: https://www.misterdot.nl/.well-known/pgp_key.asc
Canonical: https://www.misterdot.nl/.well-known/security.txt
Canonical: https://misterdot.nl/.well-known/security.txt
Policy: https://www.misterdot.nl/.well-known/responsible_disclosure.txt
Expires: 2025-06-30T23:59:59z

-----BEGIN PGP SIGNATURE-----

iQEcBAEBCAAGBQJnTb1nAAoJEGCSDchTbH+kPc4H/RrQScpJpQUL8j1OjoCzp9DG
eect4sZydwrWd/+V8fRIPLC4Q6kIj+oG3Eq2LhbnlxvbpgW5FZJVdbTEvPDzDRSs
8N0ho/KfFFkgdhncQBE37CjSBEmvfhB4ONmNN8iiOnoS13ZeO+IDFfLBHNhNCoEs
rp0RTy8aNOW0IdMXgeyD4oeCUFnUAd5jMfF6ptXHkS8CQ0FsM4QtMFysn7OvEpoo
Cxjs2y82vJAzRGUsHxhLBOalmxTDWYHVEQMPqMaDCwoa3Ji9PP7+bN1bT6iuxCcV
BmsoC6mkXey1v2HvGpZuKX/PHvx3UHFCPwfdTrm/NhOhyy8fNnxJL7/0egVS0PA=
=j+gi
-----END PGP SIGNATURE-----