A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:erik@fscker.nl
Expires: 2026-01-09T12:00:00.000Z
Encryption: https://fscker.nl/eindbaas.pgp
Preferred-Languages: nl,en
Acknowledgments: https://internet.nl
Canonical: https://fscker.nl/.well-known/security.txt
Canonical: https://www.fscker.nl/.well-known/security.txt
Canonical: https://authentik.fscker.nl/.well-known/security.txt
Canonical: https://cloud.fscker.nl/.well-known/security.txt
Canonical: https://home.fscker.nl/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQSncaf1fTaZIh8S+phLOMl1FDqCgAUCZ3/XOgAKCRBLOMl1FDqC
gOcHAP45FCf2z/39WRgTs/qEv3KV+P7vDxvzj1LoZTpeVb6yCwEAj0ME2+303/zK
1eJQjOzCj/2bKtmafIxB0NtS47zg3wY=
=y7eF
-----END PGP SIGNATURE-----