A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor eg-events.nl
# Conform RFC 9116

Contact: mailto:info@eg-events.nl
Expires: 2026-03-18T06:16:17Z
Canonical: https://eg-events.nl/.well-known/security.txt
Canonical: https://www.eg-events.nl/.well-known/security.txt
Policy: https://eg-events.nl
Encryption: https://eg-events.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEDlfSr+c91/jphcderSRpB1TuWawFAmh55rEACgkQrSRpB1Tu
Wazr7Qf+JwqOQDtedMXiTHCHYAITucqmxtqJdH6kH9MeqBu9p3tDw6qWh8yFzleS
RLYfsZUx2IAK4HyHnqcM01ytwKxjPTtBleFL7u+w2uXFGARe0oOkecJdrYs7O7YR
1t0EhG6gy0Di+vs+NlVY01z2+tuIbnW0BsnxD//2i5njS6ynensWcWPzxW7BXlAL
B5zaRQqmw52gWnWZJeFUgMZixQKMvmstDV4wAPwsK79Y/9qU0O7EqQor5AVbVqa8
m5nnbXSGMZ38TjwkXYvefg1kqnqtwkItuZF/NYZeacmIDrHMNnKhUZGPMAu4Yolg
zUphvD5sOhZw9816xfoqk2rqdSj1QQ==
=YCl5
-----END PGP SIGNATURE-----