A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@nkhn.nl
Expires: 2022-12-31T22:59:00.000Z
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/F0C956D795BE6A95D5042921153B67596A3006F8
Acknowledgments: https://nkhn.nl/hall-of-fame.html
Preferred-Languages: en, nl
Canonical: https://nkhn.nl/security.txt
Policy: https://nkhn.nl/security/rdp.txt
-----BEGIN PGP SIGNATURE-----
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=Qe+8
-----END PGP SIGNATURE-----