A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:guido@kroon.email
Expires: 2025-07-01T00:00:00.000Z
Encryption: https://kroon.email/pgp-key.txt
Encryption: dns:1275302e01cef631a7f8180c513d119a4e81fa7c160f337155da254d._openpgpkey.kroon.email.?type=OPENPGPKEY
Encryption: openpgp4fpr:2a9df1d597a0539033c9b3eb394c398c531efab0
Acknowledgments: https://kroon.email/hall-of-fame.html
Preferred-Languages: nl, en, sv
Canonical: https://kroon.email/.well-known/security.txt
Policy: https://kroon.email/security-policy.html
Hiring: https://kroon.email/jobs.html
-----BEGIN PGP SIGNATURE-----
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=WGda
-----END PGP SIGNATURE-----