A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor wfhost.nl
# Conform RFC 9116

Contact: mailto:info@wfhost.nl
Expires: 2026-03-18T06:16:01Z
Canonical: https://wfhost.nl/.well-known/security.txt
Canonical: https://www.wfhost.nl/.well-known/security.txt
Policy: https://wfhost.nl
Encryption: https://wfhost.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEv407A6OL0qUPsU/RleD6eMNiqyUFAmh55qEACgkQleD6eMNi
qyVyFgf/a6piyIGlQTHx2w29fn7a7u9FPbMT+dvoerZ8TKGUtYaUIJfu4WqGv9Za
HRArqyDAIy5HLZI110WwRdsWEr4NSiaF8iGE0RADwWPZ8cBG6CeR1TdKsp51tpdO
cjKlvgy8I/Yeiusvw/+Kg5hxExeIFNoES37h2yzUeZhi4OuaCUwEliLbfi/R588b
mOHWbgp5tF7l9/kWKoawCRrHNsuDon4KKktLXeBT0N6Cj2d32BbNHcen7chUKo4T
dXCxtDyeSPi2Cya40tVDwWFSkTiPn+oEvr536jKXo49sMSk1Lpn7m2J/1Ij/t2BY
BndPZPLirh0K7Psb65fYTteY306RlA==
=rXjB
-----END PGP SIGNATURE-----