A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@digitalimpact.nl
Expires: 2025-12-31T17:00:00.000Z
Preferred-Languages: en, nl
Canonical: https://cusweb.nl/.well-known/security.txt
Encryption: https://cusweb.nl/gpg.asc
-----BEGIN PGP SIGNATURE-----
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=0yrK
-----END PGP SIGNATURE-----