A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@innolimits.com
Expires: 2025-12-31T11:00:00.000Z
Encryption: https://www.bcssteel.eu/.well-known/gpg-key.asc
Preferred-Languages: en,nl
Canonical: https://www.bcssteel.eu/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQGzBAEBCAAdFiEEQiN1p9ZWr848ROz6NQHV6IGAQ1wFAmP/LoMACgkQNQHV6IGA
Q1yDjAv/XB6KthK3iwUk4b332f1LDjEWdhv6UZENf7AynHFNEhbVt5ief59dR9XW
hVW3j2XQpEuTBGMVrmBlYMGkdODmnlHkoLFd0UoL6VJI3DMr59kiFhxJR+ziZvG5
Ucu21NbsiHxLHBPseMUwMb+WjQV191g8DJSKIIFMfN293FlgYXNFTz3Mqo0DVEMN
t+LRLzkY+bydJo/twFWjszv+5dqIEY4DSYCoiYuJ7e87xRvf18LT6s5DfqgzExds
LaUiO3et30+cMiVZVv8Y9y5LGTGkRI5XrJ0ILKIbjjgWrzmvg6sAF7MtTOLSjWQH
D0MCdYO8sBQGOzvH04IOnPGvgyOchm6hCT15B7qJ4JFJjiTUvurL8b81MbrerUow
SyczIXbIawExrZpZEwOiHwogYpK4UXp7V8qHP5h+9BTyD9qcpSqqZy+wVFeJsVgJ
w0XiOwbuJR1S1U3kf1e+ttLKnhFfPjYiVhZgUkfghVdV2e9RqK0MKCu1f5CA1fY0
mePvE+9Q
=7j6y
-----END PGP SIGNATURE-----