A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor houtsnippersenzo.nl
# Conform RFC 9116

Contact: mailto:info@houtsnippersenzo.nl
Expires: 2026-03-18T06:16:16Z
Canonical: https://houtsnippersenzo.nl/.well-known/security.txt
Canonical: https://www.houtsnippersenzo.nl/.well-known/security.txt
Policy: https://houtsnippersenzo.nl
Encryption: https://houtsnippersenzo.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeawAAoJEDVBlqd7OrSgqIMH/ib+96lzt+yEvWXc+k1qHRoa
LbgYnhrGDka2hArf4VIB27ER3TWEalOdnqH/u6t8RMJi5SgUw1plGHXklrHMoS7h
+gmf0RHAWeh0g2OLAGRgs6LaqWBNApTYPI65Qhk5qDv99/YpkcMPasOyvawoK7V6
pKLNcMbCojxIJOf+6ET7vfIxtxyxvIh/weCIbPz1RC3z7LpQBjJMbZJbdvEoFPlF
QKR4dOCkz7cscv7wTOa/bMgIVVbd2gls3huSFwoLm5zDcVMiXrfxdTz2G/AiaeaS
MtUGNYT1GW95s+vYVFMcfcPTPGkOTPSXhuzYxTYdPyrM8sM3Asv47Zz2Dy+HaOk=
=lkJS
-----END PGP SIGNATURE-----