A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

#
# ICTZ.net RFC 9116 security.txt
#
Canonical: https://ictz.net/.well-known/security.txt
Canonical: https://www.ictz.net/.well-known/security.txt
#
Expires: 2024-06-14T22:00:01+00:00
#
Contact: https://mastodon.social/@J_aa_p
#
Preferred-Languages: nl, en
#
#
#
-----BEGIN PGP SIGNATURE-----

iQGzBAEBCgAdFiEEQ3nZyvz42DUpB+sf2+QIJiY2bZAFAmSS5cgACgkQ2+QIJiY2
bZABZwwAsNN9Kr9CIUuJtyY5VNo/zCthUN1MS3xfGXu/eQfM071rU400dMyu692m
g07S1cRiqJxfyBPDl+Zrxucmw15nMZ4y80E44H4GRLyycLfGlud5UAUxtaju5r/4
h8PUO0PXTodig/PpP8fMjvlFn2FYH4tqtsYcp9TrmmP8QexU0Wej3Jg2419+JRPv
lzQrY78V+/Lokc0758AYbcXPQ0ytUVKiDbrfLjDFeToQv4trUirKH5ouazunRFJU
9zKx+nmgQNBUxqHHZbPSI4JCvQUOr4rN66s2OPc8adBhW/8v8+zraKg4Zf31x28L
x6scNl85fU+2V8IdX1FDfDr9zVb4Hc9cUQWpUkrNKYT+zg9Uotw5coSMmIWiyYvQ
GhPCXWZmcv9XgkBobqY9yAsN+ZODCnpfuEffVxE1kJC+qZd2p9XMjllf2JUs15uy
IvqzKZYoAWQtSpGZWN6BCJaPN0/4PcZ+dBn2CcBGgb8RPNosxBfMdTlNggB2gU7a
qbiIC3uo
=AcIj
-----END PGP SIGNATURE-----