A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor complit.be
# Conform RFC 9116

Contact: mailto:info@complit.be
Expires: 2026-03-18T06:16:23Z
Canonical: https://complit.be/.well-known/security.txt
Canonical: https://www.complit.be/.well-known/security.txt
Policy: https://complit.be
Encryption: https://complit.be/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEbN7WzJ0TMePKcJZlzl6zsuLOYoYFAmh55rcACgkQzl6zsuLO
YoYnSggAokOYpnzxR1vUjwgcT57IhP0EXr0COO7dHTlGJaB6Qn5Z1VrUH7j+dSHe
gYoN9pIW5E/h6MVUIy7VrurIRI97UzKAojAoVE6pofDGhTONgFiF4BXHJd9XIjXN
c0FiHzdpQoMZVisPuk/gh/wcEl7UY4sPYpkzcQjb/MwB2pisJ3wiGfaXnX5Lo9L4
B8CGsyMp/m5dslV9YfeSbhJw5w2FZMdUab24NQfa65fGdcEIs5XnZFisMB1C6hnW
3YTLAJUVNE/t8DwLI1nCPuYQmQ8xtPmbdxrdK6KlGPcxb44rVgz8U5RC5zP+4B1l
/uLKCZcDytYkixtUpu1P9AjGlRFOCQ==
=R2vs
-----END PGP SIGNATURE-----