A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor krisockers.nl
# Conform RFC 9116

Contact: mailto:info@krisockers.nl
Expires: 2026-03-18T06:16:04Z
Canonical: https://krisockers.nl/.well-known/security.txt
Canonical: https://www.krisockers.nl/.well-known/security.txt
Policy: https://krisockers.nl
Encryption: https://krisockers.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeakAAoJEHxEFgi7LYk2OIUH/j+MK2VTnIV0O7zf0UyvOjKb
K/fKOOngJfETGu5C0q4lzE5cdMJb93MmPojbyuIFMcGa9i18VPq3jBB5u/zy2Pkc
bVJrKISLk649a+b3BH4DWMY8Rh8yqBRMi5Pl35P5VszEPmJCPJdQ8PjsVV9s7W0r
NtjGbir4aDoIyk3APEr1AOqa2URa65hHha9cuXJtDXa4Q9yTyq9o8zd+Dy07FNE1
N0J8QKocgGVMWMeTX4XHkyVxRR/GpoADyIYphIzh9WD6ltKdZzA/Lc1UB3Yqy7GL
GijUHL5wK4TvDVGGtLIEH3m8H8odEPjVYUagvIMy6JJymG+AwWGbt4R4sjs8PWY=
=UYhg
-----END PGP SIGNATURE-----