A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor deschilderijen.nl
# Conform RFC 9116

Contact: mailto:info@deschilderijen.nl
Expires: 2026-03-18T06:15:54Z
Canonical: https://deschilderijen.nl/.well-known/security.txt
Canonical: https://www.deschilderijen.nl/.well-known/security.txt
Policy: https://deschilderijen.nl
Encryption: https://deschilderijen.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEbBAEBAgAGBQJoeeaaAAoJEOwAL//HosOb+5sH9RthclIsCQoohpobARHyPdpS
eMHyXN0tg49KT9lslMI2lp6yJKkxdOXlHTaWhlLGWT6+64BeskYz6o/JOMLePC4e
E/CkO/s1hqmXidoRKYE4sGDIztQEH9Yqr6EOy96yuW88XDsaPjTB28i9hsWF4Zae
PS3FcgUT1xw5dmgObjLRZJgtPDBbZbv1EmJNgIEWadHc3txm+J2Z0EgBVgStjUyi
VpfwhqYLHO6NncCZIiHqy5y5ITjKioC2LoeT7fPTGD6oKVpP9npXqdVjEWprkJUm
lnKbvtIUJbFmbbFTViTG20rNl7dX6bnMeoLNEtZGy2KyjBHlYLaGn1qjgqvCag==
=0yVs
-----END PGP SIGNATURE-----