A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor crystaldesign.nl
# Conform RFC 9116

Contact: mailto:info@crystaldesign.nl
Expires: 2026-03-18T06:16:28Z
Canonical: https://crystaldesign.nl/.well-known/security.txt
Canonical: https://www.crystaldesign.nl/.well-known/security.txt
Policy: https://crystaldesign.nl
Encryption: https://crystaldesign.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEMx2yAbYi+f4VecwnzlgZL2i+JLAFAmh55rwACgkQzlgZL2i+
JLDv+wf5AWKsHcjrr4aueGGXJ9MOHThKIjT7Kpxzrpqd5B4Tsb+a8/uktmhh/1hg
orCzb+qB/FzUFR053B+qE0lPEgUCfg9wn0mmkG/TvhxNMw/52WbImJEfL2P/gUrg
WaIdcqab8PbNewV0DVfRyuQcygpOl9zX3U/tNaCQrSaKA1xPqoCyngZx66+INTrj
TCvLUEb4+23NVWPbNbgmt3pjsNiSE3Ukv8IZtGMSIWzs4YUhHtFs42Yut7K4czns
pH98eB6AyKEaZ2x3N3tI2VhQl4X+MFJgOh0oBO1H+w7vYAvE9yP3J6T0UV7Y0Lnb
iBmlTdIfATZ7Wqup+5yMCUYzB+YGDQ==
=m6Pi
-----END PGP SIGNATURE-----