A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@zeroize.org
Expires: 2026-01-25T23:00:00.000Z
Encryption: dns:5d2d3ceb7abe552344276d47d36a8175b7aeb250a9bf0bf00e850cd2._openpgpkey.zeroize.org?type=OPENPGPKEY
Preferred-Languages: en
Canonical: https://zeroize.org/.well-known/security.txt
Canonical: https://www.zeroize.org/.well-known/security.txt
Canonical: https://somethingtowear.nl/.well-known/security.txt
Canonical: https://www.somethingtowear.nl/.well-known/security.txt
Canonical: https://deregttrainingen.nl/.well-known/security.txt
Canonical: https://www.deregttrainingen.nl/.well-known/security.txt
Canonical: https://butterfliesandangels.nl/.well-known/security.txt
Canonical: https://www.butterfliesandangels.nl/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=EBpK
-----END PGP SIGNATURE-----