A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Our mail address for security issues
Contact: mailto:security@postma.xyz

# Our OpenPGP key(WKD url) for encrypting and signing messages.
Encryption: https://postma.xyz/.well-known/openpgpkey/hu/t5s8ztdbon8yzntexy6oz5y48etqsnbb

# English is the prefered language.
Preferred-Languages: en, nl

# Canonical URL
Canonical: https://postma.xyz/.well-known/security.txt

# Our responsible disclosure policy
Policy: https://hosting.d9ping.nl/responsibledisclosure

Expires: 2025-12-31T23:59:59.000Z

-----BEGIN PGP SIGNATURE-----
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=zku1
-----END PGP SIGNATURE-----