A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor stamtransportschermerhorn.nl
# Conform RFC 9116

Contact: mailto:info@stamtransportschermerhorn.nl
Expires: 2026-03-18T06:16:15Z
Canonical: https://stamtransportschermerhorn.nl/.well-known/security.txt
Canonical: https://www.stamtransportschermerhorn.nl/.well-known/security.txt
Policy: https://stamtransportschermerhorn.nl
Encryption: https://stamtransportschermerhorn.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEVQDIKvP2ZItP4/LVsqdoECYB+5EFAmh55q8ACgkQsqdoECYB
+5HlPQgAjCbUBXAzghzYwSU1UyBJpRCEwgpTEF3UI8an9fRVB/xAg4yzXOqDjOCz
UbtoMCE36jyh0O02MNWesm1z3XYh9GzwDeyR+gmSzzvuyyOFPPL62jrcBo851wGL
S6xKp2MAyhaaogLYdvyIiiUQwQHJTMXRCj09ge076mpOUTqb3OMt1hQ0bGD1lZ7F
vzJEdZszZb9MI83ug9sTnB/vHJxkamerJxyjLIz6sMScXeO1oRtD6NGqBmhofxc5
ePOowI21AOdhToO6KttPPysUxciuQBMSFPlnuZAsj3FHwpdwNtluEaAP+IXAASNM
9GcFI91Rk985ilHO3W9pWvstS9qI8A==
=rOlh
-----END PGP SIGNATURE-----