A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor nlbel.nl
# Conform RFC 9116

Contact: mailto:info@nlbel.nl
Expires: 2026-03-18T06:16:29Z
Canonical: https://nlbel.nl/.well-known/security.txt
Canonical: https://www.nlbel.nl/.well-known/security.txt
Policy: https://nlbel.nl
Encryption: https://nlbel.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeea9AAoJEHWPdojmBnPBtsEIAJBg8enlFydNKcNsFw5nnq13
cp2gVJ3WN2qVaRin6PI5QVssP6CVn2x5D7ueub7ZeWQCua2TPdHWhixLYzzVylWR
0P6JYrAC43CaPDTGgQQuPF0+TsLwS49SHJLYh/+XHwEp7PdMnpnkWNChTeekhJQi
EkUgKCkRTGBw3oTOnvbWNrFSBTRRZDYT5Hluvwl4tzaC2QA5ZLzRYzUxv5fvlB8l
lPBgHH1NKGTqZaM1vdVEfQn/E5LUUPSJfXt+p1RNuk3L0OI0Kww2H/oNo0CL9LsR
+XSw0d0PxaVu+8JtGmyHuArTIASNsGZcGttGL3vZeoBHHGegiQB8BdzDX5YTx7A=
=TBdk
-----END PGP SIGNATURE-----