A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor dvtadvies.nl
# Conform RFC 9116

Contact: mailto:info@dvtadvies.nl
Expires: 2026-03-18T06:15:58Z
Canonical: https://dvtadvies.nl/.well-known/security.txt
Canonical: https://www.dvtadvies.nl/.well-known/security.txt
Policy: https://dvtadvies.nl
Encryption: https://dvtadvies.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEoJ9iOxWBI2ygjAVThI6Y5b5h7NIFAmh55p4ACgkQhI6Y5b5h
7NKrxAf9EfEZ40bcDaRHAdFWIIcMjPoOr/0aVTRraEXZMfj1zddkAc2Ob9zgDIMU
sOuJtqCGQDhZjPfKOg6I7lG1Oesp0NtNxlYW60yBXvsoik5ZkyWnqWTWLn0/qjnt
u8r23vWYfA1HBczTsiDdgbZ/5VGaGKPt/XFx5bVzFxkGnjCi3f4cbc+Et2Bl0jAy
zAU++49evwSpDvEk2IJQ1eXEXVpyA9/pdFEEkL1BcIx3EglPp8gsvlHx9ayDFEWU
qaaQxM1wnc/H0vsQU8pFzbWL+7aED70awiWQ4lRTVwrsJjKe5BKcrN78FqpoiaQ0
5wQ+LP1jao1yD7DlH3REc5/uAvnTTA==
=0vow
-----END PGP SIGNATURE-----