A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor jorchess.nl
# Conform RFC 9116

Contact: mailto:info@jorchess.nl
Expires: 2026-03-18T06:16:01Z
Canonical: https://jorchess.nl/.well-known/security.txt
Canonical: https://www.jorchess.nl/.well-known/security.txt
Policy: https://jorchess.nl
Encryption: https://jorchess.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeahAAoJEAW3C+2D9zW8Sg4H/0gdiuAdArxGceR8ZBi8tzED
FaIwBwIQFgj80OtgGtP+KtHjAjm9k1wjLF1jAusO1XqQLfyHDULk8Kr/o+FTI0J7
Si/HmJ/aJT/2buBVS9c/St1GpYVIV7x9yZmbHJX23nGD9OdQ2d3sEJRNynXIb6b0
WUsUEzYcNqWt7TM+VgYGEKWB2JPhR44Kj6cVohkIpjPV5ZmE09AEu7J1AH159lHD
edzdXvizt+J1LUgd9O+jcaG7wliOsfrGqzb5UFaTDte19niCP6mHzJcRLL5xoIbi
9f37AsKkLt+ybl7oixCgsnpdNJ4SLPxK/MGXglF/KxWM7S+KTFEhAii6S00yN8E=
=/8cv
-----END PGP SIGNATURE-----