A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: https://www.differ.nl/contact
Expires: 2025-06-11T00:00:00+02:00
Canonical: https://differ.nl/.well-known/security.txt
Encryption: https://differ.nl/.well-known/security.txt.asc
Canonical: https://www.differ.nl/.well-known/security.txt
Encryption: https://www.differ.nl/.well-known/security.txt.asc
-----BEGIN PGP SIGNATURE-----
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=Z9FY
-----END PGP SIGNATURE-----