A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@freshheads.com
Expires: 2026-08-19T15:43:39.000Z
Encryption: https://www.freshheads.com/.well-known/pgp-key.txt
Preferred-Languages: nl, en
Canonical: https://www.freshheads.com/.well-known/security.txt
Policy: https://www.freshheads.com/cvd-beleid
Hiring: https://www.freshheads.com/werken-bij
-----BEGIN PGP SIGNATURE-----

iQGzBAEBCgAdFiEENEbGes05RDu3EswnshOGC1S1GYgFAmikgT0ACgkQshOGC1S1
GYhJiAwAw5x4RYfzP1EnXWYDb1qVihzUYy5ISVlJKFbnPhudJFwhqsei+dN4zyKf
et+lrQpBgguBSB0cE82GTXRK9aMqyKdckYtt83pxRfzoLOcscdGsiaJFBSWJjBpr
0YVokJ/W0WGdHCYXpYUR+PPafIYDi9xhLLUiQ0SCYw6SKWqSioU2kk/alc004vYf
9O9zVEGT12qniwh2ylZ0nOh0sRgX1ZqHwy9l7xep9rZ/wulUmqtHXd0Z2zr+qUO8
EIaXCJ3uJ34Zk2dPGqjmUhfBgH8gpTZaA+TtKGILlWQ7uRUmM4crcvhHqy8Yj94S
wlw9cfiYk0+QvCNTxyHa/UTTiTJYijhubkk2yf4O8720sLBQlJrtpxfHGU5K8GGs
7AYgwrgshPbKXHcaWwg/h+SvMecKagWNwuHVAGI2d/NrCZRHncrVvoZvInluuDwT
qalKv4PI2QziUoQz2h/G1EN7w2lK1MsjbjaYKqQfDTZt94/lU6fpx3+aDTGQ7c+w
SKESd1j/
=2LiK
-----END PGP SIGNATURE-----