A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://sandramink.nl/.well-known/security.txt
Contact: mailto:security@isaeus.nl
Preferred-Languages: en,nl
Encryption: https://isaeus.nl/pgp-key.txt
Expires: 2026-09-20T04:01:00Z

-----BEGIN PGP SIGNATURE-----
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=tZ5X
-----END PGP SIGNATURE-----