A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor vangeffenadvies.nl
# Conform RFC 9116

Contact: mailto:info@vangeffenadvies.nl
Expires: 2026-03-18T06:21:51Z
Canonical: https://vangeffenadvies.nl/.well-known/security.txt
Canonical: https://www.vangeffenadvies.nl/.well-known/security.txt
Policy: https://vangeffenadvies.nl
Encryption: https://vangeffenadvies.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeef/AAoJEKGixVfi+cI75kEH/0fgaUvo9YGAB1v1nVfcgrQz
0JgP7kZoz8yCqrxKwQ5Ozys8j7ZE9pvXqDDXruxVpamITnjxdSctbSfeRc4NWuas
F771z5+KNxSZNVvUEZHvASyQzmcpSkM8YBsODUvHjviFPGuYjxYEIzio5P6Nwibj
EEu0IVlTnxpD9vTOxkn6PihRBQdH9cdUXhRHE/dcZt4ampZOVdEs4RPU6tgOIHZg
MY3ztlZMx9SzkeWwaLvLrc30qan7qoHh7v8O5KVzR1ZaHo7sTKMPxQkcjSHXDHZk
Il3mTL/Q4+OWv3N6tmphqGFr2FCCpQRznsENFcJ8IsBBSo4FLEcd8RLSGmavG30=
=u/Ab
-----END PGP SIGNATURE-----