A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor optimaformula.nl
# Conform RFC 9116

Contact: mailto:info@optimaformula.nl
Expires: 2026-03-18T06:15:57Z
Canonical: https://optimaformula.nl/.well-known/security.txt
Canonical: https://www.optimaformula.nl/.well-known/security.txt
Policy: https://optimaformula.nl
Encryption: https://optimaformula.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE+GTGgE7t4b7OujhK4XOKTlj7/BAFAmh55p0ACgkQ4XOKTlj7
/BCLAgf+JLHDpVTZSdQgtTuf0sJ3lE+QR/uvYm4hjFzUzi7pATPPP7f+HC79c2hT
EC/60cxO9hestNbq5eJjZnIwVqkoAG0gz5jj53V/BNYXozZf1+iNhNoj0AoA2lBP
bY/KBbq7lLbzBb3BxKUz2i53XSiZIN9pj0VFy8/cBHV17r9kXkFQoWv9DPzSM/oj
t/Cldl0Ly+q5ySH3k9hOH3HE/YSdXzgM0m08bPEbzebTKbqvLP1c3OE+XGNgGNod
MRqUsY/CtfpA1eV/hJLA7/03l9zOFDEBpmJGnMIG19FcgjHDah02OVTx/FnTeIza
/Uyrdkl6GxaCwextzMFQlq+1HRyHww==
=ZWfc
-----END PGP SIGNATURE-----