A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor hartenkreetbijdementie.nl
# Conform RFC 9116

Contact: mailto:info@hartenkreetbijdementie.nl
Expires: 2026-03-18T06:41:23Z
Canonical: https://hartenkreetbijdementie.nl/.well-known/security.txt
Canonical: https://www.hartenkreetbijdementie.nl/.well-known/security.txt
Policy: https://hartenkreetbijdementie.nl
Encryption: https://hartenkreetbijdementie.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeyTAAoJEIMlrsHY44yxS9IH+wdGGjgqRcUIpoV7CnNXkX6+
cDGf9LA83hz6po5JixKtuv4LM8f5+Jheo1X3XrGZ8OgEyZ33U9KniIMoH+IIPjOr
CH1Krh5EtlnMrF1X5JITLDVvAG4AKWgr/YN3rV0zbpyvVfo86KynI+nvvPQPQxHt
d29Qn3P7LMxXD72EvdTaikLBQkgS8VjVG0JD49znxFNqaofgoHv2S9bncjeoVrvb
E02Gjsqc3IG6aW80nYb2JVyJccZ9BpakpocTcJPVCzEnbW2Z3oWLvlZ6J93e7ajM
Nx0dN24TzNBNRniLXej2RKtl5r/kRPpHxUnPl3ZWJd+5IGaCHFByM7SpSOB2ELg=
=ko3o
-----END PGP SIGNATURE-----