A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor digibitserver10.nl
# Conform RFC 9116

Contact: mailto:info@digibitserver10.nl
Expires: 2026-03-18T06:15:56Z
Canonical: https://digibitserver10.nl/.well-known/security.txt
Canonical: https://www.digibitserver10.nl/.well-known/security.txt
Policy: https://digibitserver10.nl
Encryption: https://digibitserver10.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEBbEYj0IF0Up+GY3lCuKhe/Kr/B8FAmh55pwACgkQCuKhe/Kr
/B/7+Qf/YyiwnW3yA481S5pim2XwrPZAKDh2eoj6HIV4T6axV0/yJxjRn+tf9IP8
L7Ef+pIJ3Lu0/Cetz968T4tUpuMtQE2V24G7tp5TEsg4N52ijuDyzDZhgGRXwEOP
djyowPsBdCLK1HbGIXGrmpL787C8m76C1DbhZp1zimQ1/J9wU93Tn5T7oSsTyEDG
PRkJoNQSwbj6hZ+meB50ev/TY6es5qmnAdpieRqnJZ4iIt3IEJu8YYbDFPrm24nW
zw0IdL5FaTKFYURuISUoatwQBpQOyYEvFQEIlBXjVnmM7RTm92jZUhx3ZtGYZnZ6
W9IOR+nw0tEt2Mkb0Gr7HFNZrPCasg==
=FDx0
-----END PGP SIGNATURE-----