A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Canonical URL
Canonical: https://mycloudmail.nl/.well-known/security.txt

# Our security address
Contact: https://daxis-ict.nl/meld-kwetsbaarheid/
Contact: https://daxis-ict.nl/report-vulnerability/

# Our security policy
Policy: https://daxis-ict.nl/meld-kwetsbaarheid/#policy
Policy: https://daxis-ict.nl/report-vulnerability/#policy

# Hall of fame
Acknowledgments: https://daxis-ict.nl/hall-of-fame/

# These are the languages we speak
Preferred-Languages: nl,en

# Our OpenPGP key
Encryption: https://daxis-ict.nl/meld-kwetsbaarheid/
Encryption: https://daxis-ict.nl/report-vulnerability/
Encryption: openpgp4fpr:811100944C94E98784B291AC6C447AC1825F7655

# You shouldn't trust this file, once it has expired (like bad milk)
Expires: 2024-03-16T01:07:19Z

-----BEGIN PGP SIGNATURE-----
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=h5Nz
-----END PGP SIGNATURE-----