A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

#
# SIDN Labs RFC 9116 security.txt
#
# PLEASE BE ADVISED:
# Do *not* use this security.txt unmodified on your own website!
# 
Canonical: https://example.nl/.well-known/security.txt
Canonical: https://www.example.nl/.well-known/security.txt

Expires: 2026-01-28T23:00:01+00:00

# If you would like to report a security issue please first read our
# responsible disclosure (RD) / coordinated vulnerability disclosure(CVD) policy:
Policy: https://www.sidn.nl/en/cybersecurity/reporting-a-security-breach
Policy: https://www.sidn.nl/cybersecurity/beveiligingslek-melden

# Please always try to contact us through our online form to speed up things.
Contact: https://www.sidn.nl/en/cybersecurity/reporting-a-security-breach
Contact: https://www.sidn.nl/cybersecurity/beveiligingslek-melden

# This is the PGP public key that we use to sign our security.txt.
# Do *not* use it to send encrypted mails to us.
Encryption: dns:2591d67d64ef2e80cde67d27b6510e61eca0b5b7f220a30cbaf0bcf0._openpgpkey.sidnlabs.nl?type=OPENPGPKEY

# We can offer a proper response in the following languages:
Preferred-Languages: nl, en

# If you think you'd like to join our team, please visit our job vacancy page:
Hiring: https://www.sidn.nl/en/work-at-sidn
Hiring: https://www.sidn.nl/werken-bij-sidn

#
# Thank you!
#
-----BEGIN PGP SIGNATURE-----
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=aNS3
-----END PGP SIGNATURE-----