A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor tandemexpertise.nl
# Conform RFC 9116

Contact: mailto:info@tandemexpertise.nl
Expires: 2026-03-18T06:16:26Z
Canonical: https://tandemexpertise.nl/.well-known/security.txt
Canonical: https://www.tandemexpertise.nl/.well-known/security.txt
Policy: https://tandemexpertise.nl
Encryption: https://tandemexpertise.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEzC/5U7yRUCdZRLrd7Ej9TXP99LcFAmh55roACgkQ7Ej9TXP9
9LfPxQgAzMOyCQj3MkstPZU1aPmWcwf9/FQ8I/glsTZ56uzmR8L8iLzET2DKN5Ro
eJKHtu6kt85JaHMKGBbT9GrGiMOOxUqXGCTbDVdeyO+8RofzgmSdCbmSa/jMt401
Z7wffOMqSeOGbLjfaq2zrjqeY97Kj3/Lv8AqXMWcTJxBTS3sOyErwm5gHqp5pTH6
HhffJ88VKQx7u4SmDQ67LOk17axWkZ6nPxA6k2mx7VGxU4aSSp55zuFnVApH6cGa
HV6fvmBMIRGWREbFkYtqqlOV+39l9tiHetkGp+sYbv3QHZ5qlWmAkMzk/UHQDFPa
dknWeb1cIhYG92fhKzZkjniQ1xtx5g==
=DuG4
-----END PGP SIGNATURE-----