A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Our security address
Contact: mailto:cert@speakup.nl

# Canonical URLs
Canonical: https://speakup.nl/.well-known/security.txt

# Our PGP key
Encryption: https://speakup.nl/files/speakup-cert.asc

# Languages we speak
Preferred-Languages: nl, en

# Policy
Policy: https://speakup.nl/responsible-disclosure/

# Come join us!
Hiring: https://speakup.nl/vacatures/

Expires: 2027-12-09T22:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=sA4h
-----END PGP SIGNATURE-----