A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@r4fo.com
Expires: 2026-11-03T23:00:00Z
Encryption: https://r4fo.com/pgp.txt
Preferred-Languages: en, nl
Canonical: https://r4fo.com/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
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=ErUp
-----END PGP SIGNATURE-----