A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:info@jannesmannes.nl
Expires: 2025-04-22T11:54:07+00:00
Encryption: https://jannesmannes.nl/pgp-key.txt
Preferred-Languages: en, nl
Canonical: https://securityinsight.nl/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=88/y
-----END PGP SIGNATURE-----