A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor quoen.eu
# Conform RFC 9116

Contact: mailto:info@quoen.eu
Expires: 2026-03-18T06:15:58Z
Canonical: https://quoen.eu/.well-known/security.txt
Canonical: https://www.quoen.eu/.well-known/security.txt
Policy: https://quoen.eu
Encryption: https://quoen.eu/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeaeAAoJEAx73yn4ApYlElcH/i/aOUdgEgu+vExhATOuRTe6
bkJqNw5fvORi2JW3McgJg1NhRzQCoPw+OJ68GFt7NSAsK5ejjulPOpthWbjiCuET
OTXMYZo0msuWgSICZRZxCD/PGd8EjfLwTCSazD1c7R4TD+wnokvsaWcHgen5ny5V
HnfV+OAbJa3XF0wUVdEFXLzdoO7FEtCcbUwQq2gCkkO5TUT7NbRTwnl9zOuMLzYP
A7jeyNJbETe9NiYtm1y17tAuxaBjq/o5IQz6NFDH03s1Apt57ioJy+cpgFXjk6Zi
9ojYI/8byu0YBAB+MixuuBB/6q2zguai47QIBykVMxMq2H4hTUUctv7zZ6Xb4P0=
=96Zx
-----END PGP SIGNATURE-----