A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Canonical URL
Canonical: https://sequrebox.nl/.well-known/security.txt

# Our security address
Contact: https://daxis-ict.nl/meld-kwetsbaarheid/
Contact: https://daxis-ict.nl/report-vulnerability/

# Our security policy
Policy: https://daxis-ict.nl/meld-kwetsbaarheid/#policy
Policy: https://daxis-ict.nl/report-vulnerability/#policy

# Hall of fame
Acknowledgments: https://daxis-ict.nl/hall-of-fame/

# These are the languages we speak
Preferred-Languages: nl,en

# Our OpenPGP key
Encryption: https://daxis-ict.nl/meld-kwetsbaarheid/
Encryption: https://daxis-ict.nl/report-vulnerability/
Encryption: openpgp4fpr:811100944C94E98784B291AC6C447AC1825F7655

# You shouldn't trust this file, once it has expired (like bad milk)
Expires: 2026-03-03T05:10:02Z

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEgREAlEyU6YeEspGsbER6wYJfdlUFAmkvxioACgkQbER6wYJf
dlXnKg/9GwGdmibYg1+xJHkiphcD6+WkQT1Hr+nKQ9O3/liq8EzSbW0hQCNSouCY
GUix+ySVMz2tWM4V5vmwr9gZ0S4r7Rfg0XDqDdzmNMU9gUSjCFH0mIaqL6Nh6kvq
StFY1sHpMhmnyJTr8LE+3VNRG5965LjH12poQsNdm5T2R79SFH2sNZmUq+oVtqJI
kyR/TTHR3b4DlWAX8MC/YIrsiDixWGTeEEh5bH7Q3I34yxmGNZYiRaMe/sS5dFeF
hZq1dAgRJrXFTZcNa8yqbKceGxb0ufuM6XFUi6kf9TSIgKc/Kbe+Ix3e9sDXzJ2t
29600wP60unL4cbWgNxdnbD0j+nUPNLiZN5pBOsa6tivHIQdr7Cq3usFFazpliby
draHMlFrfWbaCS6scUKQvZ1Se/fc7TqvchOzfXzpAz1L72IqI6CbBfDv0IKWbr3i
wpDtiR5GsBNn9KkS2rh3tNqJLpguaabCTIzSgjCPu6BijwUSp+11YM8nWYpKm4dG
Tl6bD0vOBp2hS+0mgMdVSrDozHp5FFUNnYLt+KDqftXwmdfjYwutRHVlZcN+RVPN
itc9xTAuQrGvTm5LqyIVg6wxR5X1UekCwlk3mQ1uILX0B6mI3Dnr7u9rDagMSdLE
1ZAwS2jhyKjNPnTx7gF88qq/JuWB2MAiUmYb8sbBZbJolQJc6iY=
=4+n4
-----END PGP SIGNATURE-----