A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor onlinedrogisterij.nl
# Conform RFC 9116

Contact: mailto:info@onlinedrogisterij.nl
Expires: 2026-03-18T06:21:47Z
Canonical: https://onlinedrogisterij.nl/.well-known/security.txt
Canonical: https://www.onlinedrogisterij.nl/.well-known/security.txt
Policy: https://onlinedrogisterij.nl
Encryption: https://onlinedrogisterij.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeef7AAoJELqI2xWDawWNtFMH/0s+OwcfH+DOWl5tYzWvlCaM
I/DSb9QEL99GK96a9v8/5pCfu3u3yd6ATo3Sc6X7NLUdjMlNsoyL4ZJPsaYvLKv5
ldBDbZphI1xNBgulF9NLZ3h5KkVZ6eX9HXwUNTMk0sZBTv1SRCZGaexTELz0Vsna
fCUGAnmqIo5e3lsLME+sKQHyLH/75aOjdantPlQs29JyuFa6tGtr6eQvjQBxEDU7
sF1ZijB1U1l2nhYFtJnpfJActGRI6TAR7K0H9YkGZoD8SqxmzaoHmDselnsFJz0V
KeMtt+6G97GiW2cUM42Rx8uVYUG/HPX9JDJ/wwwRfHTrHCp4aZemZCA6EjPlAmY=
=FfvZ
-----END PGP SIGNATURE-----