A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:info+securitytxt@open-t.nl
Preferred-Languages: nl, en
Expires: 2025-06-01T01:00:00.000Z
Encryption: https://www.open-t.nl/pgpkey_info.asc
-----BEGIN PGP SIGNATURE-----
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=4RaL
-----END PGP SIGNATURE-----