A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor inezvanschooneveld.nl
# Conform RFC 9116

Contact: mailto:info@inezvanschooneveld.nl
Expires: 2026-03-18T06:16:20Z
Canonical: https://inezvanschooneveld.nl/.well-known/security.txt
Canonical: https://www.inezvanschooneveld.nl/.well-known/security.txt
Policy: https://inezvanschooneveld.nl
Encryption: https://inezvanschooneveld.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeea1AAoJEMJcDKUMYsr66s4H/jHhtSBc+cdqTF5HDeDNkmsf
QsDnRCrXHgcFaPU6UdGcOYt+Lcnrc7TM+Pwnr23y2WPgQQ95eqljbNRTw5QoNzeC
MuZSRAf5H5Ls7XC04YqRdukJcv+tumkkIolTXBkBIn6IlUbehPZPcILQacn3yH8x
0K5vZP9Toqrr3QQg4fb/m5/VGJnBO2Gewo44B5t7c0UM8fPYb1irno9DUa3q+7oj
hCPB4q/eiISZaJ+CUYlqqUbyF4k8azJYbNXOir0Kh9fsuFWHNt3NMUgC+fwp8N25
8SK+5eurcwn4j6xW7VO5q1dVIwdkV3D5nijTdjqzXoHtkLLT+H5XeENOwADJ95A=
=YzUE
-----END PGP SIGNATURE-----