A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# security.txt for gehilversum.nl
# See https://securitytxt.org/ for more information

Contact: mailto:security@gehilversum.nl
# Or use a form instead:
# Contact: https://gehilversum.nl/security-contact
Expires: 2026-10-30T23:59:00Z
Policy: https://gehilversum.nl/responsible-disclosure
Canonical: https://gehilversum.nl/.well-known/security.txt
Preferred-Languages: nl, en
# Optional, if you publish a PGP key:
# Encryption: https://gehilversum.nl/.well-known/pgp-key.txt
# Optional:
# Acknowledgments: https://gehilversum.nl/security-hall-of-fame
# Hiring: https://gehilversum.nl/jobs