A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor kolibriepayroll.nl
# Conform RFC 9116

Contact: mailto:info@kolibriepayroll.nl
Expires: 2026-03-18T06:16:35Z
Canonical: https://kolibriepayroll.nl/.well-known/security.txt
Canonical: https://www.kolibriepayroll.nl/.well-known/security.txt
Policy: https://kolibriepayroll.nl
Encryption: https://kolibriepayroll.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE/UaR95+p9g1+cUkoAKoVhj5mC1AFAmh55sMACgkQAKoVhj5m
C1Bu2QgAwmVI7KzuoTslcw2BHPir5MNxeF1YfiWSpZP8SZpTFNyPkBKmJEEjZ9Pj
PDvL5/4mIOO0N+WOOXV7k5TXQsXdQv+qbXoZbWtIF9l6o3Scuv4cklB7E/P0X2OU
7lt++pvXV9gvrpr1YVY/G3AVBvdeezDoS3/PLV6t5LGAGMg+Nz/9eqPZAyt2fKUZ
Ewj7DhrGtBF2cod3ZPOjoXE5FLi//Je7QzQpqg/+hg4dlNI3NHl3DC6jqznyLX7X
YDLz4GWIGaPqxBfTjt/EZV8rIwron580mqUd/xgGpELzuZwQeQq1vw7jHjFLXne2
oUrAou+xgGDql6+gu4713vwK9250GA==
=cD0k
-----END PGP SIGNATURE-----