A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Our security address
Contact: mailto:freddie@lekulabs.nl
Contact: mailto:freddie@freddieleeman.nl

# Our OpenPGP key
Encryption: https://www.freddieleeman.nl/pgp_key.asc

# Our preferred languages
Preferred-Languages: en, nl

Canonical: https://leemankuiper.nl/.well-known/security.txt
Canonical: https://www.leemankuiper.nl/.well-known/security.txt
Canonical: https://lekulabs.nl/.well-known/security.txt
Canonical: https://www.lekulabs.nl/.well-known/security.txt
Canonical: https://lekulabs.com/.well-known/security.txt
Canonical: https://www.lekulabs.com/.well-known/security.txt

Expires: 2026-06-01T00:00:00z
-----BEGIN PGP SIGNATURE-----
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=xGiu
-----END PGP SIGNATURE-----