A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:info@jannesmannes.nl
Expires: 2025-11-14T13:07:51+00:00
Encryption: https://jannesmannes.nl/pgp-key.txt
Preferred-Languages: en, nl
Canonical: https://degezondestad.org/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=JKnd
-----END PGP SIGNATURE-----