A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:CVD@Juva.nl

Expires: 2026-05-15T13:16:00.000Z

Encryption: https://juva.nl/pgp-key.txt

Preferred-Languages: nl, en

Canonical: https://juva.nl/.well-known/security.txt

Policy: https://juva.nl/over-juva/responsible-disclosure/
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQQRqx9ZRfUa8RFYt75jDjjuBRPr6gUCaCbS4gAKCRBjDjjuBRPr
6l5yAQCZpNmsFw8/qjzdWHq7vTPB9eAlu40cppoqBte5W2EzcgD9ERQtJKQxrRrR
csM71JAqU1TPxkzozzT5o0L4dPRy6QQ=
=6Aht
-----END PGP SIGNATURE-----