A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor tisfris.nl
# Conform RFC 9116

Contact: mailto:info@tisfris.nl
Expires: 2026-03-18T06:16:16Z
Canonical: https://tisfris.nl/.well-known/security.txt
Canonical: https://www.tisfris.nl/.well-known/security.txt
Policy: https://tisfris.nl
Encryption: https://tisfris.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEPxLCvQcgjP2sHEL6xnI+i1FpEEQFAmh55rAACgkQxnI+i1Fp
EEQ8cwgAk57A+4zr8zRDb84dU34wGTYh0LdtvIGGffu7SFn3Rfm3HxMUMpRCDEhn
u2M1zaUE/82cHt2XHawSUDf1LGFLwU6mhbSB4csxzrjvro6xOt8blJcn6CPjnQ6W
GiwrgH5qiNWdtdnLbwhRm3Xvv6f/fyPvo+cKO/+F4Dv4ziElyMmKug3g7ppFPph0
DtGxsnwduYrXQvryWG9NO084dGCBfAgPjSuhu/iX5PHGAjSHmDjJZgEieLnh50pM
mY/QlPOaFM1N+GR3kIUTZZbFmgDd1srOYRfMixm2Z8L8+2nsqSEEe01BjU1UuHY6
/vGLEMe8lBbIL5WZbo+LqDEPZIFszQ==
=zgD2
-----END PGP SIGNATURE-----