A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor supersnel3.net
# Conform RFC 9116

Contact: mailto:info@supersnel3.net
Expires: 2026-03-18T06:16:08Z
Canonical: https://supersnel3.net/.well-known/security.txt
Canonical: https://www.supersnel3.net/.well-known/security.txt
Policy: https://supersnel3.net
Encryption: https://supersnel3.net/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEWXoahvwuUjsx6D7waA/K4lZ9u9MFAmh55qgACgkQaA/K4lZ9
u9OHsQf/XTgHfpqoJmLkUmtgm3dEjDTYuOpbuRsMZH2L6ddsSLkTK5iPRXCSeWMl
OR2E+Fpe5CKJtyymt2hhMbhS30OjGeEgnrtt/I4CMK9fidgKqYaYCmbEgFYnDAt2
K6DctbL9FmiSR4qwfoNlE5oSvNGaYjL8BqK8Zinuec5z5IOgf6zUoQJ1JyOXBhx8
Gxc33tacl0DSGKuepWmKD22xLc8XmhakxIArkdtdcDFdF18FX2HaCYcqtRREmnTb
rl9GsGoxvB0SGREq3liAEk5ZrLlkkHtO/UB9uGksE93+iT8UjPL7HHEgFVUlB0kg
q9j9EXRyFJ2XJFTX0nSOuZcDLf4CHg==
=RZAs
-----END PGP SIGNATURE-----