A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor mandatis.nl
# Conform RFC 9116

Contact: mailto:info@mandatis.nl
Expires: 2026-03-18T06:16:29Z
Canonical: https://mandatis.nl/.well-known/security.txt
Canonical: https://www.mandatis.nl/.well-known/security.txt
Policy: https://mandatis.nl
Encryption: https://mandatis.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeea9AAoJEM7mUqiUToOwSAYIAIvsXUZ54fp8KB3edvJY9zt7
2OOXeI8kTPWFwF4N9/9Qfw2vvO/rWKWv+xM2X4gWnpeuEXndcDoXS3O3C9J82wWm
vq2zcZozYbpyxwGxBS9HUFF2uOEmRyyF0GSSAsTkhht0O8Y3FfeAs1BaxSynl5Mq
ll4iZ74hRSe40HYpu+fAq0NmOTJceDUheNPsWL2tATUW00lS3Fg4WhStM4WLz9IR
3dDUJFzbXdR7p+VPyK9Y2KwB5QZ73YVirTKkfnOd6uSZ0vvXED0+OF2jJt1ccJkT
yz2NEq2U5Wt4ukUmKY4H6ybC8G/076N9Yd90kkxVdCAmPFY+NBFqRZoiyYkFYEU=
=ZpH6
-----END PGP SIGNATURE-----