A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512


Policy: https://crossmarx.nl/webpage/1231/responsible-disclosure-beleid
Policy: https://crossmarx.nl/webpage/1233/responsible-disclosure-policy
Contact: mailto:vulnerability@crossmarx.nl
Expires: 2023-03-11T23:00:00.000Z
Canonical: https://crossmarx.nl/.well-known/security.txt
OpenBugBounty: https://openbugbounty.org/bugbounty/crossmar_x/

Preferred-Languages: nl, en

Encryption: https://crossmarx.nl/downloads/pgp-key

-----BEGIN PGP SIGNATURE-----
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=BwMv
-----END PGP SIGNATURE-----