A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor heartwise.nl
# Conform RFC 9116

Contact: mailto:info@heartwise.nl
Expires: 2026-03-18T06:16:26Z
Canonical: https://heartwise.nl/.well-known/security.txt
Canonical: https://www.heartwise.nl/.well-known/security.txt
Policy: https://heartwise.nl
Encryption: https://heartwise.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeea6AAoJEF03HKeOdwjLgx8H/ikitHIlRebKNQo0T09zeqUZ
fkmcQOuob4dk+MAnA6/bIHDKHZPOpf2BnPiG99Cx3lZ618vpJN2MCsYKKACPP+jh
hnZUlCk3o9M+exihaFZVSjxWMcJMX3nZNzhBImPFe9Gcu+VZ60/fj5t+Glfllhox
Lwd9MY+lNkfXWYO6oYYdL6en/u4rRV8YHvOEeeqw2k4mBc8I/V/74Jf/9A9v7Zbl
holvJubNxJm7pSJ46KUFpxlM1Pkztcd0+qGP3L/pdJGizjXAHBA1VKyZvBEBEGnM
FoBWqieJxeWVxCccHHVEQNrfEC2p6T5BlgMirNqp8E7E3Sse0R0nfk9U7al5k8I=
=u5fD
-----END PGP SIGNATURE-----