A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor riverchurch.nl
# Conform RFC 9116

Contact: mailto:info@riverchurch.nl
Expires: 2026-03-18T06:16:15Z
Canonical: https://riverchurch.nl/.well-known/security.txt
Canonical: https://www.riverchurch.nl/.well-known/security.txt
Policy: https://riverchurch.nl
Encryption: https://riverchurch.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEQpvIMqnvifm1Ht3cXzNZVhHos0IFAmh55q8ACgkQXzNZVhHo
s0IMZgf/cqlznLxWh5pKOJrD2KSD3J6R7QYzcCL6J5ptA/d1eD6OY6w71PtVFrs1
73xA6DdrnOGuAJmcsIh7o1VXPVoYGa5efQBcs/B0dd+TTrN87lA4i8U6s5u0YwoD
eTupWJWBH26OW7O2X+JIpT8rHyCfGu9uTI3o/jOirZp5HxHEBSYdYgSFBjnPBJwr
huouCiwtacnf9gzAj2sXnZBmWn1NVi8d9lRjIsmseis+bOPUWDWJDcUAJRCY440I
4nYhBlsRNgzf5CfX/IJLg+aDEBkvrGmmTv7w97F4obT443Jftu6U/d1lSEC4+juD
dboKKeHcRAFqBSgNWuHnqetJAd8k6w==
=zoHZ
-----END PGP SIGNATURE-----