A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor pisters.nl
# Conform RFC 9116

Contact: mailto:info@pisters.nl
Expires: 2026-03-18T06:16:43Z
Canonical: https://pisters.nl/.well-known/security.txt
Canonical: https://www.pisters.nl/.well-known/security.txt
Policy: https://pisters.nl
Encryption: https://pisters.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEijsQEfi+AzFlb4ZBBroW0EPwUAMFAmh55ssACgkQBroW0EPw
UAOgjQf+MoVYr5PAHNQ/4QnPjKXWs04ho2oNtq6LeVL4BU8L90pKDR135WSvNuxR
WP48zULNnkwa0s9v80a2SwbPtl4D+wFg1PNQgr7AMGP/VBtGoglogUSCWpeVMZCb
q302Y8c11C31c0oNxXcBsT2m9lPkv+ytxwMugWJYoS1xkZulQeBGWg/PoDf6f24B
+2ivqQMBUqJQ0vkhaCMZ7irCtw+SXumzSxTfArAHZVQ9uNGu9IYtrMPJb99z3ZIg
uIIRPBlezmJhEndB+VL3iucE4gfpQhfeuB5zm+uTR/81TPGfjs2wCV10QyOHYX3y
izWotQWwA4VBfFwlsZyu1KZ34WLsvg==
=ri0J
-----END PGP SIGNATURE-----