A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



Contact: mailto:security@afas.nl

Expires: 2026-01-01T00:00:00.000Z

Encryption: https://www.afas.nl/publickey.txt

Preferred-Languages: nl, en

Canonical: https://www.afas.nl/.well-known/security.txt

Canonical: https://www.afas.be/.well-known/security.txt

Canonical: https://www.afas.com/.well-known/security.txt

Canonical: https://login.afasonline.com/.well-known/security.txt

Canonical: https://idp.afasonline.com/.well-known/security.txt

Policy: https://www.afas.nl/portal-bedrijfspagina/responsible-disclosure

Hiring: https://www.werkenbijafas.nl/

-----BEGIN PGP SIGNATURE-----



wsFzBAEBCAAnBYJn2r8gCZBsDZIdA5rVMxYhBAf9rJUWRAgECKBmvGwNkh0D

mtUzAAAfSQ//SwUV2pK3X8CTGtd1MVlIvzX0wnPjwAA6IdIhUYs6v8z5BpxX

LC3M26rgvJsXS/SJbO/3IXjjMGhr4z5vzODQKU6ei6QyS/Ci9Mqq0ydzYuDq

UFci1FwxC+8GuAguOKoyOBRAIhyDMkNzSdMqCshoRCh73/obUtnDYJZ17i9j

Z760I/VjopJ+fkyw4A56IQbxHMItSxjQdWmeJc25kJFmlbgyVzTpjOTOpCeV

u36V6JeIEn3ec0g+mtgyzzfrdNwCPXfHq/7N5mXWOceCEE3huQRbuGntQtoV

Ja9wmRgSRZTB7RTK0K8Y17nxCauEsrH9GbOaZdL2eQ9H7pknUNcppozqvsCS

+HN1KbWFBZ5cEkctZYle4fwrDo8xbxTP+HFHRgzE9DC3d0DfmoC7LnbpARPD

Eot0uTrWf2raMiDdrs5Q02c264sfjPiAYoHv/4H2Wvfv9Bg9X52QBGgLPo5i

PtJ2re2a8R8WnDuGULyklRCoGEDk2FZRP8Y6TEeQV86vQ1qB5cicNazGDv+3

Pc3ftdyiGWB9oTPpxeim1s1dsbGiZx8hEGGsvq2DdNK+fb6yPKz2cjkAA7B3

QDLjKNr6AEoWXJhD3gc9+nMA/jAFEA35Pun72wbe8EqHcr+qnQ45qnwmNGWX

H3pULBfVr9DyhjA0XQ8f1O9rX7DdzHHi6/k=

=KR3U

-----END PGP SIGNATURE-----