A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512


Policy: https://crossmarx.nl/webpage/1231/responsible-disclosure-beleid
Policy: https://crossmarx.nl/webpage/1233/responsible-disclosure-policy
Contact: mailto:vulnerability@crossmarx.nl
Expires: 2026-04-11T23:00:00.000Z
Canonical: https://crossmarx.nl/.well-known/security.txt
OpenBugBounty: https://openbugbounty.org/bugbounty/crossmar_x/

Preferred-Languages: nl, en

Encryption: https://crossmarx.nl/downloads/pgp-key

-----BEGIN PGP SIGNATURE-----
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=v+XB
-----END PGP SIGNATURE-----