A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor kleingroenewoud.nl
# Conform RFC 9116

Contact: mailto:info@kleingroenewoud.nl
Expires: 2026-03-18T06:16:21Z
Canonical: https://kleingroenewoud.nl/.well-known/security.txt
Canonical: https://www.kleingroenewoud.nl/.well-known/security.txt
Policy: https://kleingroenewoud.nl
Encryption: https://kleingroenewoud.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeea1AAoJEOG7FboXsvx7tB0H/jUgU+TSAXO6c5wuBIYd/pO6
mceAWEu85QnzUKeVquPVnFlqMMg0Hp5boBacxlNDNHHjk+q+ShUtXVVtU6KI5Anh
lJYoPV6O92ngISJI1dsBkAnijZJQEa30mMHmHh8PDWvNio+jtWSBun2KMp7Jcbud
FYHzTq1d57iRFYmN4Rm6EOVtZxNgCBsNXvlx+CiOV6fCVM6ye4QPtHXVZoSf1HEF
CHn1pO7aI24xCaId+Xf65JZNhkNl6/0qhwmYVM6yzJ+IiV6Xwo1u3Ar0GtwdOc1G
67wf01vGv60dfV0LOTj6wXWfaDjQO6MW+/JqvUh36hBjOrWIM0sVdPHUEgNlVgo=
=uKEJ
-----END PGP SIGNATURE-----