A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:info@carien.eu
Contact: mailto:henk@buma-fm.nl
Contact: https://carien.eu/contact/
Expires: 2025-12-30T11:55:00.000Z
Encryption: https://carien.eu/.well-known/pgp-key.txt
Preferred-Languages: nl,en
Canonical: https://carien.eu/.well-known/security.txt
Policy: https://carien.eu/privacy-en-cookieverklaring/
-----BEGIN PGP SIGNATURE-----
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=rkfc
-----END PGP SIGNATURE-----