A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@degrasboom.nl
Contact: https://helpdesk.degrasboom.nl/contact/
Preferred-Languages: nl, en
Encryption: https://degrasboom.nl/.well-known/pgp-key-security.txt
Canonical: https://degrasboom.nl/.well-known/security.txt
Expires: 2024-01-01T00:00:00.000Z

-----BEGIN PGP SIGNATURE-----
Charset: UTF-8

wsDcBAABCgAGBQJkAVy/AAoJEMG7GG1ZhC0TbF0MAIp7tdH4gA91ss+y/4i1qoX8do86QBUwgaBT
+pCvVzQb8O/t6BFuAiuQpz3PAJCnCbOucb5Plu0EZ1LAb5VXU3vVYtINcs9iYhXWYtBJtsMxYnOX
ji6kLKDV0WpyMj763WwM7npLjuBfRuYhDmE1bVeQvehd/kANdj1zGrlUUsCDuWlPOxOgj5tr4tUf
BCPrMDnMwLPQWNixT/GLVs2rLFHhmj91Jmrh34oNnY6bo9wcbyLgs5cLSJzFwL4rT+rX5u4str3R
l0CwOFCYUGqA219O6ivkNP6umR/sYYb7qfXDp9+8n34Dy/wgAVV0LGlkZovxINh+XUfU3DKZIuHj
ndg1eDEEUPpCC7CzhQgCfKu2UA0ArfMPRHB7dmwmlR71N/CQV8EpsUoo8HPMPwYiBHUUNM4ZudJ6
Mc8RDYFqHTJxcwSTK1kLC7dCPdel7KCT0qbMyCpXw+SNsVUp5rITgTlPcMM3ua1OW2AApwWH+kBQ
ZhzdT6t4yQWS4pH0QkFkSA==
=Ox1n
-----END PGP SIGNATURE-----