A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor paper-stages.com
# Conform RFC 9116

Contact: mailto:info@paper-stages.com
Expires: 2026-03-18T06:16:48Z
Canonical: https://paper-stages.com/.well-known/security.txt
Canonical: https://www.paper-stages.com/.well-known/security.txt
Policy: https://paper-stages.com
Encryption: https://paper-stages.com/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEz8Xw7QJAb+dCBXCaTMQuqwAtF6IFAmh55tAACgkQTMQuqwAt
F6K9dggAry5LqV1gK3ouOHeRREca5adxacDDzBm298iCzLeRt4i1bUcfdhfYG7YR
qogWE6BfV/dAyLs1I4n0Nl8W5Nr+Teag1OZSuEnDR6NrUQzUCfhQIaFrfLnLOJ9N
YIoBw6xZfHZ2+jDuogyIyWc+VP1/3DQZW+WVnMa6/iPA0eCmAJUprCCz85fVZSj8
HYy/KhYynlPyhSYnSqYYNE5QXe5WywGtRCQvQv8e677WHN8irjH9lbd1Pb/34jJR
e4B+h/KWZRANu5TyNdrefnXqOkZIx7WolFUIF98kwBT+fs22M4siPAkydD0ydEdH
DhCxkR8jCFgt+vK3RsU+78t8Q6qA+A==
=0GB2
-----END PGP SIGNATURE-----