A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor in-tune.nl
# Conform RFC 9116

Contact: mailto:info@in-tune.nl
Expires: 2026-03-18T06:16:26Z
Canonical: https://in-tune.nl/.well-known/security.txt
Canonical: https://www.in-tune.nl/.well-known/security.txt
Policy: https://in-tune.nl
Encryption: https://in-tune.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeea6AAoJEHWPdojmBnPBUKoH/0snY/ksIUPD+7SD6MztMyWF
hddptukioZm9xtVsNASHqfd8Wok/Z935a+g5N3Fx7CMIIU6QbrCn6nW4Juuo0ibX
Kvzq/uznSU4SHVEobsdcK1AENlr1E1qBcvEEHO3EY4x9jYj1h1IsmZBb8YEqKQA8
/AQPwjv4gNbZ2mZQDoW7RxY7+v9M+BUCOhSjq54kbvHZp/JlGFKGdnSXzup9eB61
URd7KpY/77PNv7QUovZSLKJyD7cOZ4F+cDNOV1FwXEWNgb3HKBCmUstk6YuhbBqx
0tMqFVpfXJ91Ro65/KAj8MEv05j0cPybt+/mqzG3G+5BCByF4/gGM9wNZaz0Mfs=
=Q7zX
-----END PGP SIGNATURE-----