A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor esif.nl
# Conform RFC 9116

Contact: mailto:info@esif.nl
Expires: 2026-03-18T06:17:11Z
Canonical: https://esif.nl/.well-known/security.txt
Canonical: https://www.esif.nl/.well-known/security.txt
Policy: https://esif.nl
Encryption: https://esif.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEnGaUmFAVZE+V2U+tCuk64KEUvuAFAmh55ucACgkQCuk64KEU
vuAkgwgAnzgzUJbwZkdUKQ4rCsCEonEFcWxXvKlGYo5tWs9LSVdDpZk5MaICwZn5
8pnM/7IPbcfNy/yJQ8bx/6Wg1qFf5MRhlDdxljP2idzLcC5Q7Yp+D0/u/ZiomYB+
8PSAMp1PQBQMEAzSmObyZY+ULB3LRyTv+wgdhZvNFaBP0abjKhWNXYAPV1ma+ixI
O1QGw2TySiOauNBLqWevPNuKMpFiVt0K7bOL/kFESAYge4K1HK/x4OVGEwk6VMMT
Ss3BM3CVWu6NynMrrotzJfNpP0vaGRawjY7xvJXI6B1ScQUw1RR8KqPvRQbo36a6
lFc2Th0ghtxczAZVwmMm7Xocop1GHg==
=mpz5
-----END PGP SIGNATURE-----