A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://de-groot.it/.well-known/security.txt
Canonical: https://www.de-groot.it/.well-known/security.txt
Contact: mailto:vincent@de-groot.it
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/ACF8507437D830493A941CC9A8482AA2E0F275C1
Expires: 2025-12-31T23:59:59Z
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEErPhQdDfYMEk6lBzJqEgqouDydcEFAmbEqgUACgkQqEgqouDy
dcFGzQ/9G+ETrg1KINMz/D4qls9KJTFqNJU5PsblA6EQM/BzGM3uD5Vj8bmGpSMR
XfIJxBVJNZDSFDF2ln26FuIs5pMGrihzjSklX3ge8zM3RdT8VKOV5A00jfuzMZaM
5Isxm7hpOFvJGN/HNqJ31TsuHz5+Mvrp+4hA+10UfCCAaBRBGvI5QfDJOqkXh3+y
wggm7AraAt/ojA+fHmenB5paotA7ei4M/LnwuyILVVmcSE5ldvXspU4CUe/RtlTi
GyXh/LD2lv4QzZqLVP1/eOqic9xbU0t0ylHt9wIexZswbP8xuSjsoqSH9AW5foqR
JHy2EyvZtATTCD21aRidABVv2oF//YuiBLZykJ7NYoAILeblgutSGf/fZZ/gvEl1
3vq9pSUbdTjfAClIQAKYxeFLL39Spfx7pqJwdESgeO5MtfwC2Xye7VrvLROfml3J
WD29wE6W5Hptq3Wmk6qy+dlS8Rqvc59TIt/0/am/0m+GrJ5Rg6AbnuY183i1b+3b
OJwKc/ybM9z46A17Lz7ncjC1ZY1amLvyP/a7J1KNY4A78GA60NXT2g73lt1xylZ+
c/Lc0XZXgVncpsJKcRctRfJRlHcvhs0RRen1uUVXpdT/RTliriFBTM2QR5VAf1Vg
ds7f6RrLIe4NOfahwH/smbbpy26UWCJEAC45W8QZvBI/kdBtjsw=
=GCz1
-----END PGP SIGNATURE-----