A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:servicedesk@oostgelre.nl
Encryption: https://oostgel.re/.well-known/pgp-key.txt
Expires: 2026-09-22T13:26:54.495Z
Canonical: https://oostgelre.nl/.well-known/security.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEzNWFy97SlFPP9FFxmgljPqOGleAFAmj4254ACgkQmgljPqOG
leDIjBAAwVX0ikKHcieyJ206C7EFlrNvzMJEAwyoOoeXXVctzU3DuDONmxi1zGfS
BpytBrPXpSmYltd1FeSCAwgSXWlR5otcGld1O1hivk9ZmewWn07aA1Ke6daBugaN
szal7XBITOs2MX+NS6vAXsKr7syuzGh39bd7rOo6fEJmZ1f2DbQONFjsZTiy7isB
sd5fMK6+44Cb2a+XB9FeGzSOj5SykTO0F2j8lJulSl8OA2BIMDR3b74gMYkp/eE/
ehU55QCbjE6wbf7nlPladWj8YwefBJNEx89hey2tsFmg3TOZ3t3WFBx5iMb02Vzr
cV862QQkY/hmUpbEKSmRFEx/S9rBF8VBYaOR71EGBQo8SvzLiA2XxgJu9NWDRWDH
qr1yfOSPk8LryNl1XDmiN5yq/tzaxtBcNMlrEgCFLE0VZ1ao2Qsiaa11P1NEcxgM
/5DiVAPIAqur9our0lpHibginp0+1tR3rPy/Ys31JAmFtrdFJy1CbDCDmsFsqGsn
M9qRTPhIFdeWIKHUzyK3DxoZf0b5lPp4z+jSQ1w4FrVwTVztxpKpvMwQBkVY3EjF
t01UZUQDMCfCHq3HkiIP49ILHZXvjE4tLGLuoFYgP43BTyU9XHuZbbry9CIcPhmG
ynAn5ftIdC1DwCg42UaRIMJ+/bzeJOOE1Uw0QzrGxt/3+zUVY4A=
=OS3F
-----END PGP SIGNATURE-----