A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor unsafe.brussels
# Conform RFC 9116

Contact: mailto:info@unsafe.brussels
Expires: 2026-03-18T06:16:28Z
Canonical: https://unsafe.brussels/.well-known/security.txt
Canonical: https://www.unsafe.brussels/.well-known/security.txt
Policy: https://unsafe.brussels
Encryption: https://unsafe.brussels/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEm8HLm/k68peINattBtBlSzpw3iMFAmh55rwACgkQBtBlSzpw
3iNAHwf/ZbpyP+8XSeT8TsvR6hTFeenTvUZ3KMNUFrB92421P1TlQ0i2RFn+Hqcv
up+onH8fh10RQ6Ty22GXeANWMBhnUW3ISqWSBp1HpwbqD88+2gqmiapnmfdiEeZE
sCddmIc9pgmXbdvYl6KkrFGxLtwURC3P608KuwIMiBsNIGnR+lm2crT9QVcrTfSM
ekoqCsj+5mM1X92MChE3ahNs09yFcr25FJ/wAV9/MsWDIyk+uZ+FwJJVosB64gx9
rbQccwsTdv9LXoxGS0dS06YY8EEmNjcDucWA06FvJdwsr2CgwyThdgRqfhyCqCV7
vcg4vFC+qjTdZtY6HhyS2AsgvcapPQ==
=DpIx
-----END PGP SIGNATURE-----