A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor ergoform.nl
# Conform RFC 9116

Contact: mailto:info@ergoform.nl
Expires: 2026-03-18T06:15:54Z
Canonical: https://ergoform.nl/.well-known/security.txt
Canonical: https://www.ergoform.nl/.well-known/security.txt
Policy: https://ergoform.nl
Encryption: https://ergoform.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEzlpKWa8RlsFV3Iq9+QIgkZbOdowFAmh55poACgkQ+QIgkZbO
dozMUAgAjdXCdO0lIpqt2AvB7CnWYhrux6G2k1JnUgf0i9llFGg4VVpE9/vaytXf
K2Y5bHOHahVAa2uwBL4HVeP/Q8hCZosNBmeOJQ0ysy9L2v+cdfzIZ5CIBlRQLPMY
rsbWNapbj+hm3hqdlqxepOWZpGWOX2mr013Mu9FVHOh4AulNmtZ+4UEBeutJVYvH
fyAF//HV3cCn2h9ToZPAcm9GHVP0OmucpOX/34+Y5xt3vBSQUWoWI7aVgwonWZuX
pAE9zflX38177phJWyUkrb7gFuvV/8bRFO2xNlv6EsZk58JZXnEXqqHkGU6ETIeu
gT7aMvgz+Ecgm2YCN/MWprgx5kYrPw==
=st97
-----END PGP SIGNATURE-----