A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor knapman.nl
# Conform RFC 9116

Contact: mailto:info@knapman.nl
Expires: 2026-03-18T06:16:14Z
Canonical: https://knapman.nl/.well-known/security.txt
Canonical: https://www.knapman.nl/.well-known/security.txt
Policy: https://knapman.nl
Encryption: https://knapman.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEkCqk60zqpn+bc0MCN9vV7k2DyTUFAmh55q4ACgkQN9vV7k2D
yTVQcgf+IG9n+FX4DQ84J5rq3d/uf6MUSFmC/i2kY1BxVGeThhPLthZ3oTAt/S8t
jhYT4KvWM6EjtB4toMah0DkXZdk1NI2zcf/6iDfuUO5/7PJUxvvPIrY7wcICH+my
epFPXq+d1ss5QaRk81+Dmw8gQlBbi9AxjnsEjnhSa8uVNbVitw+4s0Zmpokp1+l/
+f73hl3KuLKfSDgJxi2GvXQU4n5u3rGV3zOqkM8WPmZud1IwBr1k4qvNxHK621fS
JOwNHRxqzTXRdvycFJXL45FlNztiwq45nYFwfXggajdK97usVXgLtLG6aDRn1vYw
yskx33gBrp2mvSw8fqdLiO1+RXFDUQ==
=Nrhk
-----END PGP SIGNATURE-----