A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@unicorn-holding.com
Contact: https://unicorn-security.nl/contact/
Expires: 2026-12-30T11:30:00.000Z
Encryption: https://unicorn-security.nl/.well-known/pgp-key.txt
Preferred-Languages: en, nl
Canonical: https://unicorn-security.nl/.well-known/security.txt
Policy: https://unicorn-security.nl/rd/
-----BEGIN PGP SIGNATURE-----
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=8bxV
-----END PGP SIGNATURE-----