A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor de-vlogeditors.nl
# Conform RFC 9116

Contact: mailto:info@de-vlogeditors.nl
Expires: 2026-03-18T06:16:23Z
Canonical: https://de-vlogeditors.nl/.well-known/security.txt
Canonical: https://www.de-vlogeditors.nl/.well-known/security.txt
Policy: https://de-vlogeditors.nl
Encryption: https://de-vlogeditors.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeea3AAoJEHWPdojmBnPBbvoIAKEhmRgYOljAwNvjKqSKKi01
iqkKzMGfKlGMU/zpuH0F55fW406IbgmoKHNzhRTwZZbCxMjgjIynju3xRxgBYMrv
J2O1JhJA5TR7iMchp9gnPmbiN6pSAa1r3WMFBvcUndFzqDTTzrUhaoJyUpSjSe7d
R3GQTCLi0LlmDrIuiXLvc32iqS6anuqXwfgGRLk+42blPKPBRcpYLEXP+0uMJMTY
GFWLybE99vdX6W18Crt9IbSQCCRQoYfqvO572HDrYytpWFoFuUnDfwFgIm1/whsj
4fl3fVVlc91IgGTHQf3fxtX68TIOj33buc101xo6cM0qaDsCa8U3KZnW785iTR8=
=CVy3
-----END PGP SIGNATURE-----