A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor awadvocaten.nl
# Conform RFC 9116

Contact: mailto:info@awadvocaten.nl
Expires: 2026-03-18T06:16:24Z
Canonical: https://awadvocaten.nl/.well-known/security.txt
Canonical: https://www.awadvocaten.nl/.well-known/security.txt
Policy: https://awadvocaten.nl
Encryption: https://awadvocaten.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE46tpvfgDLSooiVFUd0l7KxY8I+cFAmh55rgACgkQd0l7KxY8
I+fUoAf/fSKDAgXNGpJI8D1m0jRsJOjvD90S/wAvABeY5noz51hEmnL1BjPeAllp
glcJGcW7tY2qLTvM5dvxE8/XD3kObJI9vO7XVhX6wmK+gcp9urh3wx1296WlHYtn
uZg4+IVXgEiLHj3bUyI18zWFCIOHXCa7msJlBvLNZXvYtB41KwcRvO8t/YX/32OD
8DcU5L+8J9j3MBrg1o60qNPACIAyNl7bUpodsrnVlZFx4d+McfEE6mXHBmftnjji
UvnOE05GjbIaugEHZZHbgYvqts3LsVwQ+oP4NSECGM/aA7HWK5B0MGQKlD8BJVD9
Ta+Z+qiNpG8s16DQQxEPTtc/fNEMDg==
=fDNx
-----END PGP SIGNATURE-----