A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor samsonstaete.nl
# Conform RFC 9116

Contact: mailto:info@samsonstaete.nl
Expires: 2026-03-18T06:16:19Z
Canonical: https://samsonstaete.nl/.well-known/security.txt
Canonical: https://www.samsonstaete.nl/.well-known/security.txt
Policy: https://samsonstaete.nl
Encryption: https://samsonstaete.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEKXcykRbZPT26s6m3kyCSS6MtFfEFAmh55rMACgkQkyCSS6Mt
FfGlGgf/f//xqP7qWV14j3hZW6l4punxsirqTOGMjOkiEx15SMQVhjdRYmsYJBqU
MLSXId/hhXyaEkz0xvRbebBRlOz/okxjnl3uO5aIxzqD45EwFZeubHk3I5RLVm6O
moYAynpVbLY/sO4NdzAlEo4iKePaBVFTg+f5w40EfIcsEcYmIBCqvFxZUaricA8P
o+rX2f+lSbYlOhAYQ5d+1Di1q/D5v2jJxzddLcbqQiauXH6oNhvRv9NcNN26EBmO
Vkcu+3umNljhQ5e8jmzl+zGRc9tm3BdnDg2GVINqcelfQF9yJ+UX9pipket4LLTc
AnqIZT2jXgYuEQaoBZQPrWTwQLDdgA==
=aQsP
-----END PGP SIGNATURE-----