A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security-rd@ionite.net
Expires: 2026-06-10T10:00:00.000Z
Encryption: https://keybase.io/jelte/pgp_keys.asc?fingerprint=341af076ff8e800018953009c722e8c8e5fcd790
Preferred-Languages: en, nl
Canonical: https://ionite.net/.well-known/security.txt
Canonical: https://ion-smp.net/.well-known/security.txt
Canonical: https://ion-ap.net/.well-known/security.txt
Canonical: https://peppol-logistics.eu/.well-known/security.txt
Canonical: https://ice-logistics.nl/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----

iQFEBAEBCgAuFiEENBrwdv+OgAAYlTAJxyLoyOX815AFAmhH9XoQHGtleWJhc2VA
dGplYi5ubAAKCRDHIujI5fzXkMEhCACt6ifUJKpn2uH2Nd4FmmtbHScMyhGgAj3S
T6gjdHftpLLrYOo/aryjJB5xXpTf+FbDaznrAJaeAtluZaHOvUlRAsJcfY3PYGDF
LiP+oG65DmxN7NY65X4OsCgXt6lFjvWnrjB15Tu3E2kLkJFe1lWIdKgBBhPcTDzQ
zc7OL6zq2yQeZD1usWYDdPwnJ74nhywsGRq6lxVUhy/DXxVCKNBw5XJDgK5k8NV/
pB3qGesmA7jyqRxJTcs730pf+PISLKbNWKXIp79wAnftKt6xejbXzpuzDPr3yo/S
wxCNuDka7It5pFN2Zg9RS3sAyqu4PeeVaIj4EgR5HRjG/hxSPXxD
=6DP7
-----END PGP SIGNATURE-----