A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:admin@whyscream.net
Expires: 2026-06-06T01:33:03Z
Preferred-Languages: nl, en
Encryption: https://whyscream.net/tomhendr.asc
Canonical: https://whyscream.net/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEwm83T14TFXtbQnobk98xnX1U7/UFAmhCRU8ACgkQk98xnX1U
7/WpQA//R+qWtZadMMZ4aPJm925RQiJhtwdXjjkx1ar0AFieNzN0QmJumUd3Qfa4
w59UIVsSdReupO/07JArlqxaBkWrW5H/QlZIvMJ8tbiPgwUhdIqqL/8dzg/jpY7U
KHSDPZbRRxMwdyzgaCVJnBKUae6A5XZtpUy3RO4eHhrTH0I86OFgCxw+PLxzYI2z
Zlz68IPBJgG0bhIFXu5OjX4mdI7QhwFs+DhxtrMohcpa9gL8+90w9tTi3e5NfPJI
MM5Kw2A1uFgWxuRXDZMNThdXCqS8v6VdaBy9YSTDq2UUhxmXSyHx6bqJyy/ZL/Hd
ukIUJ9l0wH6aN7vdJJ8OsxYInzlAga5YI57m1XBz/XSOmy/jkK6dRuhr7zw/w4ut
6rQt6mLPyU2ZNCMzRNZVWifXfq7GtXeagLgN+K5/uUry6EYYRQq0QVY5s5Uaf8qm
0/ytK7xe/l9vXlWvEpXArWhjB6K0aeZXjmpXpZ1tnPGslwGWDk4MUHOpKQ/VOydI
CzxmQraKEqTrFGO97JHyqDcn2EHODRo4d8OZLstsMqoauL6hIOWFiEcDFnEfXhaE
WgpDsyVknBNOVgRxYIIvr0snfklnk313TyJnFwDy8AamUAoyQyt3Q6IRphSd7ngj
5qR6VvuNS05lohRjsERzZE2NkdEMObNG6FWWEauNN768/kGLIpw=
=WU52
-----END PGP SIGNATURE-----