A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Canonical URL
Canonical: https://beheervanict.nl/.well-known/security.txt

# Our security address
Contact: https://daxis-ict.nl/meld-kwetsbaarheid/
Contact: https://daxis-ict.nl/report-vulnerability/

# Our security policy
Policy: https://daxis-ict.nl/meld-kwetsbaarheid/#policy
Policy: https://daxis-ict.nl/report-vulnerability/#policy

# Hall of fame
Acknowledgments: https://daxis-ict.nl/hall-of-fame/

# These are the languages we speak
Preferred-Languages: nl,en

# Our OpenPGP key
Encryption: https://daxis-ict.nl/meld-kwetsbaarheid/
Encryption: https://daxis-ict.nl/report-vulnerability/
Encryption: openpgp4fpr:811100944C94E98784B291AC6C447AC1825F7655

# You shouldn't trust this file, once it has expired (like bad milk)
Expires: 2026-05-03T03:32:05Z

-----BEGIN PGP SIGNATURE-----
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=Fzjz
-----END PGP SIGNATURE-----