A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:soc@sltn.nl
Canonical: https://sltn.nl/.well-known/security.txt
Expires: 2025-11-24T16:00:00.000Z
Acknowledgments: https://sltn.nl/wall-of-fame/
Policy: https://sltn.nl/kwetsbaarheid-melden/
Encryption: https://sltn.nl/security/soc@sltn.nl.asc
-----BEGIN PGP SIGNATURE-----
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=LJGq
-----END PGP SIGNATURE-----