A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor top10coffeeshops-amsterdam.com
# Conform RFC 9116

Contact: mailto:info@top10coffeeshops-amsterdam.com
Expires: 2026-03-18T06:16:05Z
Canonical: https://top10coffeeshops-amsterdam.com/.well-known/security.txt
Canonical: https://www.top10coffeeshops-amsterdam.com/.well-known/security.txt
Policy: https://top10coffeeshops-amsterdam.com
Encryption: https://top10coffeeshops-amsterdam.com/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEoJ9iOxWBI2ygjAVThI6Y5b5h7NIFAmh55qUACgkQhI6Y5b5h
7NKKDAgAitnPOsy4oCd1ZlNcbgVMKdUlNonnQK7xfGdn3HYLggDu3bau8/LcG7Sl
lbZZfw9ujl7Px77+DEN5Z8XrhagRzY7NDl6KQEbOhFl3k798AehIZoSoylhmOaS9
CWD4qT0mKj65CocJxRETPTHBXWAbLQSdfWkNSkEQajEeMnczGdXC62TMt0Z9GMVK
GNdVqoU4KJVUqg7c87PdpfYQe5knAMwI1b5+KQRiDJ+kj8HN4h15O6nwxzVi34DZ
ie8eTN2m0xWc7hJAkl+8MtEP4sxkostDftkQggfQkgMg2zGGFJbShjXfQXRf8ppE
O8z107hhujCGxpI7qGcvr8Dai0szDg==
=9wt3
-----END PGP SIGNATURE-----