A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Expires: 2026-01-12T22:00:00.000Z
Canonical: https://s-hertogenbosch.nl/.well-known/security.txt

Policy: https://www.s-hertogenbosch.nl/coordinated-vulnerability-disclosure

Contact: https://www.s-hertogenbosch.nl/kwetsbaarheid-melden
Contact: https://www.s-hertogenbosch.nl/reporting-a-vulnerability
Contact: mailto:security@s-hertogenbosch.nl

Encryption: https://s-hertogenbosch.nl/pgp.txt
Preferred-Languages: nl, en

Acknowledgments: https://www.s-hertogenbosch.nl/hall-of-fame
Hiring: https://werkenbijs-hertogenbosch.nl

-----BEGIN PGP SIGNATURE-----
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=m8Wn
-----END PGP SIGNATURE-----