A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor desalles.nl
# Conform RFC 9116

Contact: mailto:info@desalles.nl
Expires: 2026-03-18T06:16:00Z
Canonical: https://desalles.nl/.well-known/security.txt
Canonical: https://www.desalles.nl/.well-known/security.txt
Policy: https://desalles.nl
Encryption: https://desalles.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEek0YaMkVy5DKcsIJDl0i+UxVnlsFAmh55qAACgkQDl0i+UxV
nlthjQgAvqW0etJeGuywdAl/Y4uZaOmMXSbVGU2aSSr+hzPkn2EmXTMVWq2yIpVi
hwH48HusdAgylIj2E3MCijMERc10UjMDQIo4hdJmem6rl+KWSQ9DUtOAQsOUFT1r
eot2GHkcD1YFFDEfJFSwcSTch61n3Q9cBfMzkYNkd2Q8tGZd+cCq5lUVMCPYYMUT
Y0rbuUpJVSXT08/kIeOfyiyK2lIcFIBFgkrdeIIaGv4YOv8lxyosMYdmzyVZcpOG
9auChXn8JJPxWkcZhZS3ZVV0lm1ZYN5PHmL0U0g83lrA93IhqgMBYG0AuRkudfMU
cfbC+WW2Qb0X7QHgTtspFnliIzMoig==
=IjHM
-----END PGP SIGNATURE-----