A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor kookstudiodelft.nl
# Conform RFC 9116

Contact: mailto:info@kookstudiodelft.nl
Expires: 2026-03-18T06:24:33Z
Canonical: https://kookstudiodelft.nl/.well-known/security.txt
Canonical: https://www.kookstudiodelft.nl/.well-known/security.txt
Policy: https://kookstudiodelft.nl
Encryption: https://kookstudiodelft.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeihAAoJEBPvgZcOcSJ/XVcIANJYR7PZrAEHdLd8WyxKmZX3
iydajhnrPuJPKD3odRDeQKWKj1+ZhvOprO9/zgCxagbE8y53nZZKqiBidXji5rDo
XixBsc/GFGzSxW3wqzMDw8fTfaPyvaah6z88YGZbhtMPQAGInxMO8j3K1g/RC4E7
1pI/JBtNW/ETyqrcyh6eRH30pUij9cVNZ0GF1duK2qLJkyq5abB3qUgK/SevGuLo
8iMFKjLbSj3Ssln173IC+/WPlY8QGv2tu5INIaOwmMAL/2y7agFLK7ZVRHECPzzU
V8zmgP1sHn9PH0TyXrpXAz/9cfNmIAQrf6ujP2h3EL7dug7ZUBkrFl2L5An3bLM=
=Y2fn
-----END PGP SIGNATURE-----