A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor cre-admin.nl
# Conform RFC 9116

Contact: mailto:info@cre-admin.nl
Expires: 2026-03-18T06:15:54Z
Canonical: https://cre-admin.nl/.well-known/security.txt
Canonical: https://www.cre-admin.nl/.well-known/security.txt
Policy: https://cre-admin.nl
Encryption: https://cre-admin.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEzlpKWa8RlsFV3Iq9+QIgkZbOdowFAmh55poACgkQ+QIgkZbO
doz7wAf/fZOOnRba2MXyqsiIUYy6NXu8wVjmYFSS7dZFVndZw6rZAkJlB94QFdQb
QKZyu++0oHU6pyciKc+Z2dkInzSCfuIS+dOxqeirToZlispY5AYqNuK5faiyLG8D
10TckV0MJ9ETVER5Rzre74k3PozJNP6YHEfemcgFlE9WNHdM4G++lXrZcRT5EyRR
uOm7ERN1if0DmnRlNDiTzAXdTiuek51v5XylcAzblamN7rfLL387smmpHCWv4AQO
VMw2jo45SdUsonC7eY+VHBH0Br1kZvDMbwqt9z/TR3CIGzQ6mdhICsqnsiN7f1QD
78qm35eR8LObo6oj1EVvbwGyd+SVnA==
=L/bx
-----END PGP SIGNATURE-----