A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Our security address
Contact: mailto:security@hroling.nl

# Languages
Preferred-Languages: nl, en

# Expires
Expires: 2024-12-31T23:00:01+00:00

# The OpenPGP key
Encryption: https://cryptophobia.nl/security-txt.pgp

# Canonical URLs
Canonical: https://rawdutch.nl/.well-known/security.txt
Canonical: https://www.rawdutch.nl/.well-known/security.txt
Canonical: https://hroling.nl/.well-known/security.txt
Canonical: https://www.hroling.nl/.well-known/security.txt
Canonical: https://cryptophobia.nl/.well-known/security.txt
Canonical: https://www.cryptophobia.nl/.well-known/security.txt
Canonical: https://oqkd.eu/.well-known/security.txt
Canonical: https://www.oqkd.eu/.well-known/security.txt
Canonical: https://castlefest.hroling.nl/.well-known/security.txt
Canonical: https://quantumcrypto.nl/.well-known/security.txt
Canonical: https://www.quantumcrypto.nl/.well-known/security.txt
Canonical: https://cloud.hroling.nl/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=BP33
-----END PGP SIGNATURE-----