A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor odysseuspalace.nl
# Conform RFC 9116

Contact: mailto:info@odysseuspalace.nl
Expires: 2026-03-18T06:17:21Z
Canonical: https://odysseuspalace.nl/.well-known/security.txt
Canonical: https://www.odysseuspalace.nl/.well-known/security.txt
Policy: https://odysseuspalace.nl
Encryption: https://odysseuspalace.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEEGYzR/Qwp3FsHcYk43iUk0W9i+8FAmh55vEACgkQ43iUk0W9
i+/QfggAlzz/8ATpzwAzOkfA4SDidKgE9WXdBi0C0ewpyK1Vk3pyhM+lhkTb7mDe
u08tjnEe98J7Xu7E/xY8ZIqE7utaih1dVAlmouZ1LfunXxhqAHqLuHJ3aktn5Og6
/I7qVbU5vDu0qgSfALLy5ZiOJYvmI5kbqSXgezhrpgXMlI1qiHWUky8OFDHb1AW7
NNixcF1ojjmVY70XI1PSSgiYIZcM5UEz16SYL4p5sdfBj+7xxkbISCPKYtuVbYHw
ITIBNaQR+sVTaJqQ9CiijowpHC/4fyN8vbzQqlJvkhIdI4BzGmGjqdLXrcl39Ksk
voCj0qbBqulu5Z818DZ2oPH1ZKSKZw==
=hqNl
-----END PGP SIGNATURE-----