A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor heelzijn.coach
# Conform RFC 9116

Contact: mailto:info@heelzijn.coach
Expires: 2026-03-18T06:15:57Z
Canonical: https://heelzijn.coach/.well-known/security.txt
Canonical: https://www.heelzijn.coach/.well-known/security.txt
Policy: https://heelzijn.coach
Encryption: https://heelzijn.coach/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEYr5mitWSO7A5Ihe2zDBQ72Hyt3oFAmh55p0ACgkQzDBQ72Hy
t3r6rwf6A6ndKEgH7AHGwRhtqZmxDj+LMP0z2NtrKPHd7cZnwmDlLMFR23lGSRsu
NTfR/YOTP4I+wWh+8EHZP5gIUu8JFDhh4tnrqDTsxZrzXouu5OHO69jRKcgBVXhL
G3LBM3dJJ3x+sdfB4IhTThvzv4zYbBcmX0lONVs+7lFJhj6HHK6CeRvbrproDz+c
A19NoTUzItXo6XSIscmjF+IufM4NivrF8LAKedPXttkwtJexJYUuF7Pm/QpBY75D
P81jqQsR6PZKo8Bop7Ak4oPKciq7vxCwg/KEffFR7IZNt1xReWbLGTCSQkBYVbp/
BAFFY+ujh6Q5cA1dNoS7Kjyp0s9eEg==
=0QHs
-----END PGP SIGNATURE-----