A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

#
# RFC 9116 security.txt
#
Expires: 2025-11-03T19:55:40+01:00

# If you want to report a security issue please first read our responsible
# disclosure (RD) / coordinated vulnerability disclosure(CVD) policy:
Policy: https://www.rb-media.nl/security-disclosure

# Please contact us via the following methods, in order:
Contact: mailto:privacy@rb-media.nl

# We want to thank the following people for their contributions and reports:
Acknowledgment: https://www.rb-media.nl/security-disclosure