A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor cleaneasy.nl
# Conform RFC 9116

Contact: mailto:info@cleaneasy.nl
Expires: 2026-03-18T06:16:29Z
Canonical: https://cleaneasy.nl/.well-known/security.txt
Canonical: https://www.cleaneasy.nl/.well-known/security.txt
Policy: https://cleaneasy.nl
Encryption: https://cleaneasy.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEerblOzmoSaS91jx1RCs29CPiiwYFAmh55r0ACgkQRCs29CPi
iwbz/ggAhS4zBucMmh+1D4dEaIyc/WCuH6Tr6RTtQnrW7uphuBraP6lDaWR47QYh
4wB1Y2SoQOrgvi6DlYpSsK9d0w2KnoPKpUnxaheiU6RrwtQoTWKSe5ue4eA3IE2I
PLA2gDBl6WoILg8CsKLAqAxiJAg8S5FaEvpRyWZdx24S50pu9o7XWwn9Xx4gTG7+
9M75kxCU3xSXvTzGIAj02lK5ZkEGoTdqVATvRU7w04ftu0L2l5AeSdtS3b0XTaV8
ZGmzUpjUtRN6qB79p8A1Aj3Yp38pTPjCcdxXd/AdbPIewUs3yyUoVEA3NXL7iAkv
ACBG4VoPvdwNuTfw3gQECS+G4QMkYg==
=i1YQ
-----END PGP SIGNATURE-----