A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:servicedesk@oostgelre.nl
Encryption: https://oostgel.re/.well-known/pgp-key.txt
Expires: 2026-09-15T07:02:47.567Z
Canonical: https://sameninoostgelre.nl/.well-known/security.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEzNWFy97SlFPP9FFxmgljPqOGleAFAmjvRxcACgkQmgljPqOG
leAaqRAAhEw467di7VdTI8mAjbSxx+bLSWzH/OwQobeI+CDzNF4TmrKmFsyyVnjp
I6/P6UM0vgBrytnfbKnqXxvtR80BSLXb+5buAX6D1A/HDGg9N+4Eg9EYUAk1KzBf
yGaQBPcIKZIKCnBTXlOg+i/mOO6O9qE9XqyhfdE+da1nKR/p5ZGqWtma38j9Djwg
ppUU9D7bekEfX4l9DsVIgVgYQ4u7D8J1LoJXjpdHxTXwn6gsqjZZjQeYtUuSOS34
aESnLQVAPRKE8uGgQKDAtgAvtM92nUPwvnlnnSsiak3yeHSDV4c5W9FU86CjEYyp
pMLEBycIpzwLYRM1KgLcSfkiXk+f2Mduesmtk7xu/ives/hU3bJPXPCp7Amk5oLo
BfWuWt/S7ljQ4Rq22zDRrrmZROxNL4NBDMaKcegsOKAW5LcEB0o5LuwdqC2DXc0V
nffhkAFDOwmDGb7ZhVmWrc8rdezqW4oKUBmKJ3cfwD5nA2uVuuhio0NRVlQ1lhCM
WDTuNCclLWB5pIWn8+kZGyR4vckI5Y346B2aWylP7ndZ/w9HBVcKPV6GJGHuIoGl
Rq7ITrf3cr7UxpMK/8biSV+Z+8aAeuKl9HEe+1203qYkHAKygmqHvtSFTbauD4Li
37OtJTIThss4u5/BMdMh6UBusuDnBW/S3Zt4ZzT88Ej2VThPW0s=
=5uQx
-----END PGP SIGNATURE-----