A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor vitalogisch.nl
# Conform RFC 9116

Contact: mailto:info@vitalogisch.nl
Expires: 2026-03-18T06:16:41Z
Canonical: https://vitalogisch.nl/.well-known/security.txt
Canonical: https://www.vitalogisch.nl/.well-known/security.txt
Policy: https://vitalogisch.nl
Encryption: https://vitalogisch.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEqg1xcYIj0XEFePgElJ2M/SFx01kFAmh55skACgkQlJ2M/SFx
01lXqwgAo1VRMxhab0kU3tCmeTcWGOO2W/kR1kP5lO/QD+UrOdw/U3d79L+NR67B
vKKDZFcnMLAf43Hb/ynOj6iP6V2oVD4DUG6cfaZEFMDFF/HzqF5V41Y4FsQsPE92
lKk+Q8GHDHAd7gRAaKSVkO84dQKm6U1Wsn3H/1v/RNVIQDGGhh5R8hnZJ561Mfyg
cUrf4kxHVFDmapHmF3aN3p/HPkFsLrEv6GIvYL0KTPSzhssZb0M8UT0Y1YpSBdOS
FwDf/NwtBvSaTmzAWQEYiPKL35tJwgFy2H6CN/v6vZlFLwhig7CYTFqXbUbko2ft
wGrcoGrVIYuI343xAheAEhVw3kC8iA==
=1MFA
-----END PGP SIGNATURE-----