A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor ocwnieuwsapp.nl
# Conform RFC 9116

Contact: mailto:info@ocwnieuwsapp.nl
Expires: 2026-03-18T06:16:13Z
Canonical: https://ocwnieuwsapp.nl/.well-known/security.txt
Canonical: https://www.ocwnieuwsapp.nl/.well-known/security.txt
Policy: https://ocwnieuwsapp.nl
Encryption: https://ocwnieuwsapp.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEoJLDZoZlVT38uuIFUTjSvgr866sFAmh55q0ACgkQUTjSvgr8
66vHlgf8CuhWhAp8fj1HX4bQ/YOX+FM8BMTWyrkiDe+/GpOIhYmDhFPMTZrw8MDC
alswVrLJjfTIWay2mwNtEPj5Gj07yu1qPXnx/bGe/hobK7JK5oG1W7Fhtq71Pjnv
JyNQdA6AvGvXLz9mbjoK/59In3uCQzsFm5hoWlpNNP4udLbosnNmwaqnGCVYMq+A
3lANBZGHzbOLxvUBTtCY1b7dS1UOEvfM7WLEc8Xa3mor/LTxycL18F/cUB9Z1/rq
sxPpA5LC5juWraJCIa7z/P7XkludPJBHKxRwT/k1NiKDrrtr7aO3NN/NvnKOUMME
952BdsqNOxxMObRwiNDhaLTt/GULoA==
=bByx
-----END PGP SIGNATURE-----