A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor familiefranse.nl
# Conform RFC 9116

Contact: mailto:info@familiefranse.nl
Expires: 2026-03-18T06:18:09Z
Canonical: https://familiefranse.nl/.well-known/security.txt
Canonical: https://www.familiefranse.nl/.well-known/security.txt
Policy: https://familiefranse.nl
Encryption: https://familiefranse.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEdoZiZekuD40l1F39y4QQLgKw+BkFAmh55yEACgkQy4QQLgKw
+BkVSAf+OS5GvlM6mm2jMGTvQIdvM3ghbmQEDz+MT+5FIhmf8EnedLBKjbIZF32u
ec1I0Qy7h9ojN1IsEhPmONBciLrPwzAc/Jn8b6+fttbGK6UPVlGuhDqh7drHoDyY
j8VsJweWoSNR2iYI9QU3oKLZ/K+Ya0mddfK263PV2nTL0NESfvYNMaBs347RZ++e
DRQRfNx13GWKuJV/vj47khu1SNiCxNo7E3f7E76rfGDnJFWTKBcp+VQHJv5IYZ1P
IGOkQOpxcM9A6Rw2ZCYrJi6YSHQA7mAj77rFv0BnDW7i7Z2NuXFHrHQJXUf4zvgo
AzgROGNgPXRBw3WvlOOeGZqugTKR8g==
=QXMv
-----END PGP SIGNATURE-----