A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor eligere-dns.nl
# Conform RFC 9116

Contact: mailto:info@eligere-dns.nl
Expires: 2026-03-18T06:22:49Z
Canonical: https://eligere-dns.nl/.well-known/security.txt
Canonical: https://www.eligere-dns.nl/.well-known/security.txt
Policy: https://eligere-dns.nl
Encryption: https://eligere-dns.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEbBAEBAgAGBQJoeeg5AAoJEHKFViutsbaXdDAH+M4gdxs7ocO9K9MVSeFQC+a8
0koY2W26gBQUNNgk5L1CoGSFg4uiLG3SmyF97WsMGJ2V+iXA2IyvuXeI1CfjtFlR
gzUOXqETMOF7sPTplaWS2bK8PHC3+ycthoRWNals1qO06aZR8kXfKO17xQ2RvgG1
L2gXd17Q3bumyAwGb0sTPGlw5wJYnWNVDINLC9kkrUBj6T8SXlOD73ZggmpFxyAb
/Gilw5vko0bauIytCdaSMQrGo9QW3ex5lM2TSYcdguqjAz0iJRLlbmzVYUSm5ObU
pVWWrXBJBAUTDwReau9Ht+DGpBeuiLuaf2WuDkVQGXnWkzAipxD+G+xzsc3G3A==
=lJ/R
-----END PGP SIGNATURE-----