A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Found a vulnerabilty / bug, please inform us
Contact: mailto:cert@maastricht.nl
Preferred-Languages: nl, en
Encryption: https://www.gemeentemaastricht.nl/sites/default/files/2023-02/PGP-sleutel_2023.asc
Canonical: https://www.gemeentemaastricht.nl/.well-known/security.txt
#
#
#Policy Dutch:
Policy: https://www.gemeentemaastricht.nl/veiligheid/coordinated-vulnerability-disclosure
#
#Policy English:
Policy: https://www.gemeentemaastricht.nl/en/veiligheid/coordinated-vulnerability-disclosure
#
#
Expires: 2024-01-31T22:59:00.000Z
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEUEtQoE6dgfO9jo5OmPVmJ93vzpsFAmPiOQMACgkQmPVmJ93v
zpt7Hw//QjrM4424kiHx+fQpFmvEnwm7kgTXDn/DhiLsf58TErYFadbDZPZH8a/z
ZqIDvglHKrdneFAlqlKMdEP6SbLmD/nE9X3GBUxBWieOqDFEP/hrVXtRGH5xeiWy
guoEiq/5D42g1WW0+WhUEiWqUUldMZSIM25fHwKSD6DJEDYrTDg2hnpQCKbrzYzW
OG9HlW5jXeewA3d+6a5Dt0Zsr5QDwLxbpKv6auWEvArn9xcPia5HZX2Eqh9k9pbd
eJMT5pmlZTOTj9FZ/LqNDWPnsBPhyBlWVduLs0dgSb22nTLyoF6I8iegWpmoC+4f
lW46yaH12u6s6FEnt+g8a59css6lTIKxk9VV3acLfcB2h4ld46Tue9pICv5CjJVm
KtCtDOu2h/GpMWEVfVcCCeFSvJrk3+y9FYuLolfH9Y41MhetDh2FLgbPIueujBW1
WYqF4Zw8yrFRJaG97WFY53K5yY6h/x1hWLYeRcPKvHgKUa0ob29prSrtXdHW6HOI
lkOvk8RRbNgPWut4R81dZPPxvRAGEahH1GDmBAEPSuWofjvCuYTVs0Zpiq+1xMV0
vbcyq/F3nyKXr8fS/igBQDepwuBgS1sNENTbmA0G0qK1sC+2mYLvtGTFFHesevNC
GPL9CL3JA98+ZYEyrnClwscBt+Wrd82CeMEP3knj5aK0UXfVEuA=
=ZP4F
-----END PGP SIGNATURE-----