A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:responsible-disclosure@KNB.nl
Contact: mailto:soc@knb.nl
Expires: 2026-01-11T11:00:00.000Z
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/C877FA30C9239DEF71B8442444B1FC9C41F5D905
Acknowledgments: https://www.knb.nl/responsible-disclosure-hall-of-fame
Preferred-Languages: nl, en
Canonical: https://www.notaris.nl/.well-known/security.txt
Policy: https://www.notaris.nl/page/beveiliging-niet-in-orde-meld-het-ons
-----BEGIN PGP SIGNATURE-----
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=IQ+t
-----END PGP SIGNATURE-----