A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor grarueb.nl
# Conform RFC 9116

Contact: mailto:info@grarueb.nl
Expires: 2026-05-25T09:50:21Z
Canonical: https://grarueb.nl/.well-known/security.txt
Canonical: https://www.grarueb.nl/.well-known/security.txt
Policy: https://grarueb.nl
Encryption: https://grarueb.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEPxLCvQcgjP2sHEL6xnI+i1FpEEQFAmjVEF0ACgkQxnI+i1Fp
EESd2Af9GNAGJM4EjzT/KQGI40u9y7/Qgqau6mgTEoAYfbhryQ0/oHJtGvso+wAI
B8/jWT+iNFZDnGy4zsBRBCaI+Qul4HqrK1EanspYF6r7oWCzGKLXoshadwynNVao
dwddN1Vx8hZtZmcEOy4q2LXWiloXVS28PN2D+gkYR8Nvvle8oWXELGytf3HOrTKR
23jj8mMsUCC4hmtdOgmaQSqVUrs8rvEwLU21/kKw8nza31K08ko7uGyio+aVYqhg
KJhHSJChaGVHPkGlocDMPWg89UWEQ2EppffLuotrt0HVV4t1cJdJvaY0WIzBOyaL
etpOvFhy75j7OKP7+Qa+eo5G9RGXHA==
=n3PY
-----END PGP SIGNATURE-----