A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Canonical: https://www.antonarntz.nl/.well-known/security.txt
Canonical: https://antonarntz.nl/.well-known/security.txt

Contact: mailto:security@antonarntz.nl
Expires: 2026-04-18T11:37:00.000Z
Encryption: https://antonarntz.nl/pgp-key.txt
-----BEGIN PGP SIGNATURE-----
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=Jgbs
-----END PGP SIGNATURE-----