A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:admin@stije.net
Expires: 2026-01-07T21:00:00.000Z
Encryption: https://stije.net/gpg-key.txt
Preferred-Languages: en
Canonical: https://stije.net/.well-known/security.txt
Canonical: https://deonderstroom.nu/.well-known/security.txt
Canonical: https://onder-handen.nl/.well-known/security.txt
Canonical: https://aoa.vg/.well-known/security.txt
Canonical: https://wandel4daagsetubbergen.nl/.well-known/security.txt
Canonical: https://stije.nl/.well-known/security.txt
Canonical: https://brucedoet.nl/.well-known/security.txt
Canonical: https://spochtig.nl/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEXC3H9KY6ejPE5/u7Sprm7kYWCqwFAmWbK2QACgkQSprm7kYW
CqzISwf/eYz696VX4SuYTp+M1oWen90m7Pp2rYmgoFiVG4UG9TTh73WN/2x5k2uo
NagZk7/Gzt1i/KKS2rPBoF+AefJBY2PmmKARf3TxCUyutGTZc7Jw2OrvLN51MP8w
FdEsSjOmqn0T5hJ1MBlzsc2LeK/rWS+FAdCRug09fwPRNA3uLDBmyWz3K5H3p1Qt
+jglwZQSZyCDLqiN1JI/LlqaMCVJ4+CKoJ0X9wPrjpjn/HpxyBkVx9Bl1SXLT5qL
l7conDWytQGImLPoPSpCFESdEaWFTpZ+z6DktbJQ24r+j7AH2p1XjRa2RC4Ry5lZ
TT4JFaikvL979MZXZ8bKk/T9NKPZBQ==
=ftP5
-----END PGP SIGNATURE-----