A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor cocobanco.nl
# Conform RFC 9116

Contact: mailto:info@cocobanco.nl
Expires: 2026-03-18T06:16:14Z
Canonical: https://cocobanco.nl/.well-known/security.txt
Canonical: https://www.cocobanco.nl/.well-known/security.txt
Policy: https://cocobanco.nl
Encryption: https://cocobanco.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEKXcykRbZPT26s6m3kyCSS6MtFfEFAmh55q4ACgkQkyCSS6Mt
FfH0VAgAhI6r67pVOXBu5vi2yZf1x6WLQNL4+EJ5lh05VEZM8072gZx7zHjOhe5D
N+/lirWMS05zdkmW6sozUAioaUobVGPiuE7ubvwMUjHV+irJrOT3cHawmsKyW4Fa
RY/DwK6Xqt341C4g6l69QUezSaj8SCfMzmMT2Wh/5Si+BGUUVm6p1p2mh1/7H98a
Z/JU9GBoETBN2II2a0fYK2m7SP4KmVK4F9/6sucbu0sbUsFrOyh5r6wE6p2Ffper
9FcScD6TrCQiE5SCRxOPFRY6reJtJTt4oM2exen4/TDHLmOtsO41pHDTQbD+3L2H
J0Vw3N7lpTqrId4gaWJ6vjnRwgJmGA==
=Id//
-----END PGP SIGNATURE-----