A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor vccholidays.nl
# Conform RFC 9116

Contact: mailto:info@vccholidays.nl
Expires: 2026-03-18T06:16:17Z
Canonical: https://vccholidays.nl/.well-known/security.txt
Canonical: https://www.vccholidays.nl/.well-known/security.txt
Policy: https://vccholidays.nl
Encryption: https://vccholidays.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEz1h7ZL0GLYMWuZ38PCr/Q9G6DjsFAmh55rEACgkQPCr/Q9G6
Djt2lQf6Ai+z0HKzGq8WojuGoGpJTR+GmR8mZ/ZGDa8fhMDuG8zNtPqSVM4GCYLi
RaS4gYdhYvCnPGPPhJz3/ysb9xpmO4Gy3Iat3yw6+Ctr9VV0YE/lUVzBHMn4LJvX
baZhY1KyKkHbWpw5D6Tmn5/saqHQefnv36toYll0FHhHlf7pwmdOCc+Kia0tKynu
tEvWCAEABOmxUBWic1O8NzsY8mF80KpThBQ6imesgFOyE+TT6IuhbK3IVfHfJ40l
XSey/PBnLp3BcM2LtM/lxSOUYXtprGqhnDRHzhiud5wDqcp1vUVTrtBmc64eY5+V
iMRjBwlJERfPqgw9zxn0C5trAIEI6w==
=9g+M
-----END PGP SIGNATURE-----