A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor hansbreuer.nl
# Conform RFC 9116

Contact: mailto:info@hansbreuer.nl
Expires: 2026-03-18T06:16:25Z
Canonical: https://hansbreuer.nl/.well-known/security.txt
Canonical: https://www.hansbreuer.nl/.well-known/security.txt
Policy: https://hansbreuer.nl
Encryption: https://hansbreuer.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE+KD0RsxsDZZmrD2AkHlwoFCMsccFAmh55rkACgkQkHlwoFCM
scew2wgAv/SHgHT6zL8tPksaGzhrkBltXiWRFFw3CUvClmPNRVyQQ6simWsAJ1ju
42Q9Tvzk2SzmTuRgtPzPUJcZxz97wJI0soc/NePm0XPRnIHP76H50qB2Q5gvj0sa
52U2F3YXC3szyS1IRPzTKE4md0xyE4QFRN4ZpoeUt5E8bQM6TAfJtNcwdB04udEo
wWrkqwan1qtT41dxFzLWd9cohwYJEk4aIkf4te94gjK2+idcdtn0awGeZKwhsoki
vUC0FfwqgWaRtrA9ajIK1FXj2pyRvfTxy4NMs4uh3iTB/ZPk9goAz+RokcCAvV3j
RSh2YSXXCSYtFtrL2SniokKfak4DUg==
=3R8P
-----END PGP SIGNATURE-----