A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor dfobv-server.nl
# Conform RFC 9116

Contact: mailto:info@dfobv-server.nl
Expires: 2026-03-18T06:19:08Z
Canonical: https://dfobv-server.nl/.well-known/security.txt
Canonical: https://www.dfobv-server.nl/.well-known/security.txt
Policy: https://dfobv-server.nl
Encryption: https://dfobv-server.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeedcAAoJEAmNsAemX/8b8hEH/RpQOAdQEvF6enMsSjV1f5V8
1PpEmf73GjOwwzTnp763okvennDwZ9X835Ywn9RwO72bIMeW/Mkn4sOj8A04oUMX
KSroX8YUSEb65lJZuJph5p4ZKj9+eLpY5eYtpFSVuceRDOnkWUFTOaGMZkdvCABD
bhMrSfFPCBOi3tFDa4+GhJG4lv9/b3HxXWZcuMmh9CBz5PhQmF/G0gjoXOhsARHL
IgrcWEVnsM5i6TNYNc17QxbsIg/BKVhqBN4lBJw4OpLBTw2wDepsAQ8YXMYuyX1K
6hUle2jCzrgDicxzoUkvQrcAfVuJEhEpga2QFK/uPq1pAI7asym/0oxnpHIdzHk=
=5loC
-----END PGP SIGNATURE-----