A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security-202403@taw.aerodroom.nl
Expires: 2025-03-14T22:00:00.000Z
Encryption: https://www.aerodroom.nl/.well-known/security.gpg.asc
Canonical: https://www.aerodroom.nl/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQJVBAEBCgA/FiEEzpEbAr8k1XnKidhe8wOy49Gv6CgFAmX0fPchHHNlY3VyaXR5
LTIwMjQwM0B0YXcuYWVyb2Ryb29tLm5sAAoJEPMDsuPRr+goCXEP/3FW1foJ/IEK
DMn8DzjJbWHF1zGDlPKu9vtKd2geF7mEFIBQGlR3S+V58JXw+UeEnL2J6kER93mU
XdCL8t6MCXYDmxVNjWJupGweOeXePnOMJBP0bxJ5Om5mamm1rHZLq06zGnGevnLQ
n51Kl13p6yEchggPJK8PhaYZjXWZpIRZjaTcjlnWB7gH1c++Hsi3Q7GXz9G7DH6g
A5AE5S5fiNse5UP0Xt9ieZh+eX0xU8H1l1bclHxap85ump85eDkyrmKIHJFP9ieR
3MydocAzf1vbtqjdI5SdvQ89Ja+s1eIL4/qKIPyC7iN7xUndrxIlvIZNCTHitzZT
98W7EQsZ1Z+SXf2cClAuHtXDjizlMdJwJf6+y5jrQWuidDQbytsoyVur5gIwbX9U
g/5dtkC9ZG/j4xh4stAJB/RFFqu+iYf8ifpRZlzCSOLDZuoroSK7sJc8Z6ukuxFp
/nAbATwdZxPm/AK/zBDl4JZgUlkCkvAkWbM8TPz58Htdd7tu4vbA8crftvd/zVxy
lY7d97vOey5+yMHrGI2rXfZx0jfcNoxV1Xio/cL4G+g9AHOikpGMjbQhwNq1kY2g
vs7IvV9IZdKOGJughm0icj6v9SnWJCXSW7yQ2Q8QGaISz2vX2KHQDA1JCRhqC7wv
nzq6+SQFlam0Y4z5q5zFOwh8IAft8dKg
=acUd
-----END PGP SIGNATURE-----