A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor romantischhotelparijs.nl
# Conform RFC 9116

Contact: mailto:info@romantischhotelparijs.nl
Expires: 2026-03-18T06:15:56Z
Canonical: https://romantischhotelparijs.nl/.well-known/security.txt
Canonical: https://www.romantischhotelparijs.nl/.well-known/security.txt
Policy: https://romantischhotelparijs.nl
Encryption: https://romantischhotelparijs.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeacAAoJEGLrBd/pSa+E230IANQoxydlhHqJdGRe/JJdfPiI
O5HRiZy+e9mSCrDD5hQ8w7r/n/ThNEvl2v+UFXSMxmMk0b/aZsgkNmqG45VgYMaB
zO1tC61IO7tcECxvk2b4BW44bAFOKH6ioQ8b4g3LWdkAiRFchjG1SpjmN4EpQXPb
UPw77voYIDogDzozkhFqait9mmz17FZxRATc7sNhlDSL8GmJOymoU2dYOnHkI93v
M/t2axOh6NdD2KO5gLIGEt5j3C++9VFHB6y9qASpeC64d55vHHOGTa3/yqNV32sb
h1ZuJ3GqK81OPrLZ/CYxJcleYbKwHFd72Fn2v5Hp2mXgXmVCfc5/p4ZCrEmcjdE=
=ochY
-----END PGP SIGNATURE-----