A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Contact: mailto:incident@delft.nl
Encryption: https://www.informatiebeveiligingsdienst.nl/wp-content/uploads/2015/01/IBD-pgpsleutel.asc
Expires: 2026-12-15T16:13:13+01:00
Preferred-Languages: nl, en
Canonical: https://www.delft.nl/.well-known/security.txt
Canonical: https://delft.nl/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
-----BEGIN PGP SIGNATURE-----



iQIzBAEBCAAdFiEEGmhaLDNXTslgjSpyE2XNQknXS/UFAmf25cEACgkQE2XNQknX

S/VQvhAA0HjZQXP5EyCX699oTBLm0N9ixqfP7dfy58mF3kv2uXA2cih2MamKrlFy

J8yk0DsqUKmwB9Z3DXdpn37h0SbdL1qsz99023K3XJcmpWNW8nCQmFeLMnaCefVF

8NzCsb9B3OPY1DS8YhM6skonRc0e7nxt0JaM1OXV5cCfiKK15VhsD3Qm5gNPa75w

cqXBeygMGTaDZO+fb63WdCc3K4Ncql6DZl6tXJTkSf60rgQ8d9x8Xxn/G7uUPzG1

xMiknIlZvIQrNQBRwG/lKxcXsPDEQnmjq/RdldfA9nFYe5aAhOy5xMXgCgPModyp

IBmfwKkfal5iwUMEiqitRPo8LsQX8cCAyGNjx8GLvoyAEtjnaumeDpqC6fr6zKP9

Vl9FSimVossy8oTHjTofRQ6+/SXPjD+cbhuFPjeI0DIivMavnPaOjAaDcubo3xj4

iJahIty3bzQ2vQFoR7mTjicuhGdnl6Tg/VYk8D4ipkrEffU0iMEq7qjteJ6W/F6K

uO5/Ht2weD2GkIWHk1hFMhnJ0YWawdU0vTSVWdRQMHueyvu1CS0ZV6//+SMtck2A

J1bOA+cb9YYBtBX6ZWABeZ7BOUUvJCdW6Bj9vDviE4ry3lacyGQLfoXlt9ICoMHX

G1glnazOG8JtgEx2hEfRP1aoCyk3o7sk6wEVsjhFJObi2i6xpfk=

=GAWo

-----END PGP SIGNATURE-----
-----END PGP SIGNATURE-----