A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor buijten-online.nl
# Conform RFC 9116

Contact: mailto:info@buijten-online.nl
Expires: 2026-03-18T06:16:23Z
Canonical: https://buijten-online.nl/.well-known/security.txt
Canonical: https://www.buijten-online.nl/.well-known/security.txt
Policy: https://buijten-online.nl
Encryption: https://buijten-online.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeea3AAoJEF03HKeOdwjL94QIAMfAJspnYI0eoXQtsm51XFY2
VCKlJKparArTnI/IcOUzbXVdEgO/25OTG4r3QG/NsIebhchRzN7u0suriw6zNCrg
jdl9Xh/0HQ7SG9NMI/Sg4+4nCF2+nBYLICzfRiugvCKxV0603OsGRDG3qeVLZjVD
ONiNL/3qiN0lutrCmZp1lgQD/cF3JC7uSeaYFgkodwZwCXAYb3YpHgdVmiDyJ4tC
C4lEv03qY6m/1QmMbfwNUZmSfgKCxY9EVa9qOy2KNeeVbbLMfyP8RLeiiw13i9jw
YX2/lY+P1pnchza3H5F3JAfiwj7kFOvEVg+SmQuAgBoc2PjMeJwFUYqk4csdvFs=
=glD2
-----END PGP SIGNATURE-----