A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor basv.nl
# Conform RFC 9116

Contact: mailto:info@basv.nl
Expires: 2026-03-18T06:16:19Z
Canonical: https://basv.nl/.well-known/security.txt
Canonical: https://www.basv.nl/.well-known/security.txt
Policy: https://basv.nl
Encryption: https://basv.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEUcpvt8sQmNgdYu4cBr29h/99oS4FAmh55rMACgkQBr29h/99
oS7a8Af+LFcYs+49Ym6leLXgypv9u/NZ+V+6Wz8YoCdHf03V90+1nCcR9MPkS9Uf
BB0eiZOOnJhogy3XFryBoaneZzPStWZR7wrLzE2tI/XVPGqZc3naz9/MR5a/nMZc
14kuWgDLrRRcDlu0NtXR+kgJbrU0MYla4g/7hGHp5jW/Pvm30yHb+DABFsAuaswH
T87Y1w2iNZD26SyR8bIwVDHkCU+moFtB4vmw0vAYCvsi2CKbaDtw3AYkgpLKmtyK
6H/0x1LdKIMrZ63W/CaGEzKTAHGHgVThYEoGDBtbDA1LyUIPYQJkZnSSQISEIH47
ChkIqtKJ4ezJTYRMu55ey+tAts8h8w==
=F/aF
-----END PGP SIGNATURE-----