A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

#
# SIDN Labs RFC 9116 security.txt
#
# PLEASE BE ADVISED:
# Do *not* use this security.txt unmodified on your own website!
# 
Canonical: https://example.nl/.well-known/security.txt
Canonical: https://www.example.nl/.well-known/security.txt

Expires: 2025-05-30T22:00:01+00:00

# If you would like to report a security issue please first read our
# responsible disclosure (RD) / coordinated vulnerability disclosure(CVD) policy:
Policy: https://www.sidn.nl/en/cybersecurity/reporting-a-security-breach
Policy: https://www.sidn.nl/cybersecurity/beveiligingslek-melden

# Please always try to contact us through our online form to speed up things.
Contact: https://www.sidn.nl/en/cybersecurity/reporting-a-security-breach
Contact: https://www.sidn.nl/cybersecurity/beveiligingslek-melden

# This is the PGP public key that we use to sign our security.txt.
# Do *not* use it to send encrypted mails to us.
Encryption: dns:2591d67d64ef2e80cde67d27b6510e61eca0b5b7f220a30cbaf0bcf0._openpgpkey.sidnlabs.nl.

# We can offer a proper response in the following languages:
Preferred-Languages: nl, en

# If you think you'd like to join our team, please visit our job vacancy page:
Hiring: https://www.sidn.nl/en/work-at-sidn
Hiring: https://www.sidn.nl/werken-bij-sidn

#
# Thank you!
#
-----BEGIN PGP SIGNATURE-----

iQGzBAEBCgAdFiEEaFcndNIG5y7CF22hJk1I6j9lq1QFAmaB1WEACgkQJk1I6j9l
q1SIhAwAhf5LuWeBl1nlYaiOiQIFYVhMyNeM8SFe0fQzWK2H+sausM1CpsxIpPiq
u9oqyXFDe6nMVZoSY3nbnyWoFc36gMEqgndJ2JofyQ9YIOGkqW7Tyzv3z3/UYlvQ
/yVFd1lA2RIwqBhpWKDSjZs3jtIL6UgQi4i6Wxg2incLoDRjzqYq3O3cp8ATRyPu
XS6HGBZhWkBElWw8gB6ibfUqZLp6BtpDS58SvmjGcZO7HaxmCKEXmTK1sO0CHnsT
wB0q3h2J9fYBRETkFWydm8n1jimY0y1vdiRMBKt8iWZY3SjVpB8iFgY7zvPw+u2i
hpZZiT7Arf6NhU2FecgLhOvK+T8b8D5gt1iGWEQf0seDjnIMS1B3IIXVX/9AWP3/
gATR2HyLkhn4g2P8Mf6j/NZ45YiifDmExJo+N52lRSYqoW1Ct6oaJQiZjn5j4Ja/
duDtQuUlUM8TsqPRsR6xJBCqvlIkI/jlzdCaUQA9hn97W5ZhU6WTltXqmcK7b1WI
uMR3/u/W
=ybKu
-----END PGP SIGNATURE-----