A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@digitalimpact.nl
Expires: 2025-07-22T10:30:00.000Z
Encryption: https://digitalimpact.nl/pgp-key.txt
Preferred-Languages: nl, en
Canonical: https://digitalimpact.nl/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=ybeL
-----END PGP SIGNATURE-----