A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Canonical: https://winkwaves.net/.well-known/security.txt
Contact: mailto:security@winkwaves.com
Contact: tel:+31707119119
Encryption: openpgp4fpr:818B58784EB13C5DD8CF401BBB1FE687EFDBB3EC
Expires: 2026-07-29T10:28:31+02:00
Preferred-Languages: en, nl
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEIggVRmJzp0YePtgn2zR/k4ZU+jQFAmiIg0gACgkQ2zR/k4ZU
+jT/gAgAi87F39o8i+2qbqfR7WfWY/SKlucYiUEsKp3U6nellAzgyVVd/P257MIA
+iPHcZyXLSLbRXNKWNezHIr4uz8nZ5WYht22iBynIogJywHld6WLQuk1qVK1ibcx
CsuHF+b4QHQZNW4vSnS69Nv5sn+kxabj03TbEHr9KcYC5rS+fxr6Uupx2B7XII99
qqlMdut/lbIMIIqJmg2ae5V1qPM8C+pFA/iXu3TiyCxibi+hwXFbHfOjHuPON/Ic
+V/nQZFxmHvLnXD+j21ErMve9ejLNvM6yRsJMR1z9+u2ey2C7AmUYC7bZFw6lS64
am2rO+nb3oz6pDCIumfiCnsFq4ux3g==
=4w0l
-----END PGP SIGNATURE-----