A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor qualityindesign.nl
# Conform RFC 9116

Contact: mailto:info@qualityindesign.nl
Expires: 2026-03-18T06:16:27Z
Canonical: https://qualityindesign.nl/.well-known/security.txt
Canonical: https://www.qualityindesign.nl/.well-known/security.txt
Policy: https://qualityindesign.nl
Encryption: https://qualityindesign.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE+KD0RsxsDZZmrD2AkHlwoFCMsccFAmh55rsACgkQkHlwoFCM
scdkLgf/bcA3XlwiI4SVS/9NZL1KZcYUynwP8GQxhk3Ymp5Z2mziXruu9+e1caLN
zNC1f+0hdxhVhsC6FCtgXT3Cb++avKtgEEpEXaVbNsXveKERKcUStIpla3aXLKLn
DLumyxDQsj0xOY/X4W8oYd7VFoTat6NGznw6GxoEkMQLc/3HuVQCkL5bGcSJpir3
fjN3Tut6RfbWVQPhNyIwfOStwrcUuNuzOyRzthMq+Fpo7lO/r5o+zA4Cml/yen3z
FXjV7bUOz8vlHSkgTjyZAhhit91k+Z0bBglZ6l3htAN6pqvEu5Hxl+NBQ5R2bWvY
zAOw4mrNxLNrfFR+Ja2sS2P1wypyzQ==
=LBkA
-----END PGP SIGNATURE-----