A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor toonjehuis.nl
# Conform RFC 9116

Contact: mailto:info@toonjehuis.nl
Expires: 2026-03-18T06:16:15Z
Canonical: https://toonjehuis.nl/.well-known/security.txt
Canonical: https://www.toonjehuis.nl/.well-known/security.txt
Policy: https://toonjehuis.nl
Encryption: https://toonjehuis.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeavAAoJEFrZKRCbJNS1nBgIAMEgeWufcD9s6s6IxtdsTMDi
NO8GTE+zfKBZQRLuGUfLJ+RrxlKCwMpgS79d7Yk8PKy7+FFSYhO7erGSfu2/7Dt4
ja4XR7kMKRu4sY4vKwIepVxtnIy0Ayu6g/lOtRTcZloDucDUVjs+ibkjdYGajI5M
xhYHxZF7BnO3g0beIBVIE3gUqTnmMiEAV31aBS2PKMGnmJmepQvX7StfePS1InjR
kSzEuoALWRmWpiK+f5bY0hj1iNkWwPhmpaJeVuU36ck8L3bZOifzzhyJ88j4psxp
82zS1N0ijCbOIQuLzYmmWmcHlIeGaiVGdqQ8v0N8DTFZWQjCmjV8jd/JCg7h/IQ=
=Zur8
-----END PGP SIGNATURE-----