A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor vtimenen.be
# Conform RFC 9116

Contact: mailto:info@vtimenen.be
Expires: 2026-03-18T06:16:41Z
Canonical: https://vtimenen.be/.well-known/security.txt
Canonical: https://www.vtimenen.be/.well-known/security.txt
Policy: https://vtimenen.be
Encryption: https://vtimenen.be/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEYwOe+MyhX2XMlvRuMi1phzcKcUQFAmh55skACgkQMi1phzcK
cUQDPwf+JZjOogotkN/HGwr0VRtKimxWg1Koa1JSRCIWM/WODipVVx/AMnfqiOae
zq/ipNP5N2rcwL2pmvyxh+Pv3FAMsqXaTVqYheZHYqN332K++H5gPjhLnG/VaIRj
KVYRBIm++K+7r1VA/bD57eG2NpGYqQZY6GF28ELIjL2oK3tor1EKfD/jdIX7Vvas
6KbC4EEZBBby4tNiK7Y/E3lfjT6TrIplUKrHkDnfjCoyXHjbqX42RD1Ok+M/BG7b
IJkg6G2EzUKupGTAiScsC90KmVKBqXujr2AEkvux2Jnl37vA1v6X9toWAp/PMZ0A
84OAN9GL8NxIRWGtOhQxvYuaibmSDA==
=CfGC
-----END PGP SIGNATURE-----