A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor shipdns.nl
# Conform RFC 9116

Contact: mailto:info@shipdns.nl
Expires: 2026-03-18T06:16:05Z
Canonical: https://shipdns.nl/.well-known/security.txt
Canonical: https://www.shipdns.nl/.well-known/security.txt
Policy: https://shipdns.nl
Encryption: https://shipdns.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeealAAoJEOM+MvGGo5toVSgIALzuZrQgKH3LUgUBX0y6+fTQ
eKstAm3EE+tOLmF0axVoZE0BWAnW3pIE/FF22bAxci9jiOsX8MWrixfdLbwpeYVF
AlYWpZHJIC+1HIS4r49i5mAgFSWbkf+Jx0bSb8KQUbe2LkILWzJwQBHSukO4FMxj
XKoA/ZCWo57w0skmohkMyfCY4D4XsGmd9DnNTlFHc67L6+ExrI7U6CPDdEhL/Y3H
VU6qtmTOJAw43dQ6igHx3YSAin6KuxyeTeP9uJ+pFXcoVf0sc6HmVSqnmEtZ/bf6
vCzsu/R0fmH3onXbYaZGh7Vpux05i3SRiviZzPFspEdXWyv/wxGut8Tzy9Vd0ak=
=WWao
-----END PGP SIGNATURE-----