A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256



Contact: mailto:security@savvy.codes



Encryption: https://www.savvy.codes/media/site/f32c4978e6-1741768161/pgp-key.asc



Policy: https://www.savvy.codes/verantwoord-melden-van-kwetsbaarheden



Preferred-Languages: nl, en



Canonical: https://www.savvy.codes/.well-known/security.txt



Expires: 2026-03-31T00:00:00Z



-----BEGIN PGP SIGNATURE-----
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=5hRs
-----END PGP SIGNATURE-----