A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor webtalesserver.net
# Conform RFC 9116

Contact: mailto:info@webtalesserver.net
Expires: 2026-03-18T06:24:49Z
Canonical: https://webtalesserver.net/.well-known/security.txt
Canonical: https://www.webtalesserver.net/.well-known/security.txt
Policy: https://webtalesserver.net
Encryption: https://webtalesserver.net/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeixAAoJELmZdZ+s9qusHXYH+QEN7b7CokmgRvJVTFsI0yIN
aPaCFmOD5atqfUgYuoCdxY9wFNHpJv6Dq4fSzml3jbsqSwo6wlfvx5YoLCGCN+sr
5duPUC92gpsBnIgqRs552yiL2OPvqGIo3Ri6GfeYLzrFlPmuldJ0WxwYOcqvc6sG
4am0nzW9itKPUUiQ+B2snGaIqi/G9AtFp721YIvqsU9WaAmAqAiSZAy2TmFdqGoY
U0DvgXLPr9xwF0wVJUT44hpd2Mm8oZ8bPigfcT30KXJNBOxDlfJZ+JaIL/+TsiUN
sPvvq4TTAQVgBPMBu5RUT6KFSZlB+2NmTl36TKoUWPXvxIC/eGNbQIvAjQGb8kc=
=Wjaj
-----END PGP SIGNATURE-----