A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor pietmous.nl
# Conform RFC 9116

Contact: mailto:info@pietmous.nl
Expires: 2026-03-18T06:16:17Z
Canonical: https://pietmous.nl/.well-known/security.txt
Canonical: https://www.pietmous.nl/.well-known/security.txt
Policy: https://pietmous.nl
Encryption: https://pietmous.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEElgWmYW+jB1PktAbZUxLzR8IzkiwFAmh55rEACgkQUxLzR8Iz
kizFOgf/R6tdVuqBSiHtjIp1C5OpH60LTtlAH0hLcX4JMywVM81d9MEF/FJR5as3
ze1W/6FlqKTLLDDsmLUErpMh27LLk6SL7iOmLThizfgmt5Ca3IHYuNYQ8rxQ+UhA
fyQSsZQk3UNITNFSy3xrr1fnxhA2avuY39QiMxRlLkf28rvL4kqYucqZsrjs+kPu
qibQXF3iTxHQXAs+gAXSJNtQjPhV/VAnExQ1skAN5fvOjWUBKI9hU8YdCYj6fNhQ
jQEMhBxOU2WV7iGsLZHsyKjKTkWB3lmxalwVlCpSxAYZwcFVQanyi+VfxlLg1Wvj
R/5qhGuvQhrdptON3nQvM9skLLdEvw==
=4hKr
-----END PGP SIGNATURE-----