A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: https://assets.tue.nl/fileadmin/content/universiteit/diensten/IMS/RFC2350_1.8.pdf
Expires: 2025-01-30T11:00:00.000Z
Preferred-Languages: en, nl
Canonical: https://www.tue.nl/.well-known/security.txt
Policy: https://assets.tue.nl/fileadmin/content/universiteit/diensten/IMS/RFC2350_1.8.pdf
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEmE6IkDIrrhg+py/riZzu6eAcPQwFAmW46MgACgkQiZzu6eAc
PQxJLQ//dik4h4ws/eaX9vFDXHpSJn5wErHWVtIzVFjZO7vI/GIPMqVuGbwzXUOE
EEV1MekdMWXjDpkZVs8ZXA5LMfi8cUfh5O/L0CCUNVPlQplPsR7CenAA3cbLiREl
FADV1OZlAkSuLw+7ER0QG9mNtSFE0QkqEqzZDB7n5PQwieQCBeq0In6+ezzwGuld
UKN1QMyS8CrmFHT+qHXM8qRM7d+PkcL2YK5mO8ClCPpx+pSnL1UesfU3531uwePN
mFDbsqMf9wgSif/PcHTmdc4y/iZOxd1XL4ox4V+lZvtBt1USKgbetV3IlcxMeZPq
fUdPUKJrEG/0OK3Z4vGgE/pqjxjyF8r2inzWKxJ8olDy22i1YX0y4c8RuZWGgVNs
5eMBHcCTFNW7JmyaixJ7MU1THDBz0DCuSqay7AmRNVQx/baHqyDPfFCeKMiHj3m3
t12nO3wnu4Fe8C/yW+E2AYGr7gb8MzFp+C5pOKTVldz7RhCLkoxM1FckOOaBSvlr
Jkbm4aD5H9rN0IRuyDDZ8gYFCEYqep7Mnt2iXGtKpDb42Pi4ZjGWje+fpCPV589y
V9DT9Wk33QN/ibbEmHZIhXl+vSm+RWYsbmmLvKsezbh0KAmNvd2EqFlkuFnmAWJ8
gMc1HeiWJuhaJXnH4V7Yp5J8jA8LjJcaMu4russynGUscV01tio=
=/WMc
-----END PGP SIGNATURE-----