A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor bresjes.nl
# Conform RFC 9116

Contact: mailto:info@bresjes.nl
Expires: 2026-03-18T06:16:14Z
Canonical: https://bresjes.nl/.well-known/security.txt
Canonical: https://www.bresjes.nl/.well-known/security.txt
Policy: https://bresjes.nl
Encryption: https://bresjes.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEz1h7ZL0GLYMWuZ38PCr/Q9G6DjsFAmh55q4ACgkQPCr/Q9G6
Djv0OQgAgAci65ng5r1oPU6T90VLd0KnmqOYmhtKlLjYAxk5hW21/YHphcXMEGQW
SzsQHORwEX3B+okHtIukrfps9LiqdJy1hNfSlzNZ7JlEaHsGKY/AEZFp5hZIO6Cp
UpKmIq0tbuJclqedATFAygFJljjS1q2yULais2xCTWLSlB+CoriZwA1izpkYmOcy
qlrvUcSnaeAefKdYrfZAqO0649ZXLn+8qbUptbH1JbZQt93onqxvHyYEZ7XOKp3u
WcYfVS0bs96J3j/QmFmfscYS+O6DqvIpD6A5vjc6r4cX+IFlgWVt6S+hW+Wp4BW1
PFNDjEP4A7igPiknKhuFwtPv0cV6RA==
=dV5a
-----END PGP SIGNATURE-----