A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor jeugdbrandweeramerongen.nl
# Conform RFC 9116

Contact: mailto:info@jeugdbrandweeramerongen.nl
Expires: 2026-03-18T06:16:16Z
Canonical: https://jeugdbrandweeramerongen.nl/.well-known/security.txt
Canonical: https://www.jeugdbrandweeramerongen.nl/.well-known/security.txt
Policy: https://jeugdbrandweeramerongen.nl
Encryption: https://jeugdbrandweeramerongen.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeawAAoJEO6o2iW8lPZVHU8IAJI/jWLiuRsIE/k83iy/3V/a
IB9jtmQdSKdTsVo1HKketb9RXLZn9tV64gg/MUc07PRQmP3joLA0UDA7QXjxdCla
cWsBoRhABZHWdk9iuF/4mbo2Q69Jgk2oHlwlzHdolhHaxyG6APtmk4sxsqjJijbs
SjeNGieEmJkBZQFaNV35cbs5YTjLB9FoJ4V2u6v8Fedi20OgwqvGn+OesdYJm9+n
vHSJ98SjmKg2Re37sFQFCe/dg6IZXd+iKrrbBXYtyxYpuHWqBUC5H5LBvdI8mkh3
dqdznXomvKJcy8CSz5PprxuGFySu2oMRQ2QVh80N2mC4DyIhUHwyGJIvHm82Z1M=
=/Ok5
-----END PGP SIGNATURE-----