A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor infrapartner.nl
# Conform RFC 9116

Contact: mailto:info@infrapartner.nl
Expires: 2026-03-18T06:16:10Z
Canonical: https://infrapartner.nl/.well-known/security.txt
Canonical: https://www.infrapartner.nl/.well-known/security.txt
Policy: https://infrapartner.nl
Encryption: https://infrapartner.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeaqAAoJELEQK/TRkMjUhHUH/jBH3rUzOtPJ4twOpwnrOBct
adMqNwvhm0fnZoO3WXKEYFMnq/mzs98ZPlLmPC0Np9Bz4x0GsX7QzcYVlxfkzNvF
8TbOQw/r+AsPT/xNDvmG9smzf6Pf3p9AlB0lKoEVLTm6EyWMtvnCCB1Y1HXO2LUJ
1FKYNxfBuwU2EWY04h0/QR6v7KncSopPWJkBHVjlEcSiLs7JxwUuG6LOIjx9R1uf
sxqWf9kqS9u4PO4NlSfEgFE7O+H9J8fw6pEkK9WRSlG5Mg6ohqbdDk419o6xmTLL
muA/wHmx6QkV82R5PgQoatw0ZWb+JGSb21fQ6hfd56uBuzqSt4svu5UnFy1AGSY=
=za/a
-----END PGP SIGNATURE-----