A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor browsertest.nl
# Conform RFC 9116

Contact: mailto:info@browsertest.nl
Expires: 2026-03-18T06:16:14Z
Canonical: https://browsertest.nl/.well-known/security.txt
Canonical: https://www.browsertest.nl/.well-known/security.txt
Policy: https://browsertest.nl
Encryption: https://browsertest.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEBU7U1oylZxtQVTrUwJ7+t3r6jOQFAmh55q4ACgkQwJ7+t3r6
jOSY1Qf+MuxHqgtlMIKvGwhbrkEsVblZ7zlik5jdbepZBl7dojdGlUhILYq4yJP5
tV/hdQX6/Lhhitc4aWhFj6keJyoLOd2k2CKq42sqg0TIlWLY9Qj/MGZamYpn/orq
6N2J9NcCOOXpxZnV/j2p35NHwh6LjPQpICQaSibmDxvxphSEJ63pu5N3/iarDx3e
a7bEbu84Qc+0+0xhRT4XB5zHvbFYknrr2bNOBckKJRA0ct62jywMfTGrRbcTJYo7
BHdufAmhdo5L1apB8KkQjQkvZPZKgx3Ltqes47fWTxNuoHX9oKYbqii8fcPD5L4I
9LXtmoBBnaf/idm5tlvSsjG2ir8M3A==
=ZQlS
-----END PGP SIGNATURE-----