A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Encryption: https://vanabbe.nl/.well-known/vanabbe.asc
# Van Abbemuseum Eindhoven RFC 9116 security.txt
#
Canonical: https://vanabbe.nl/.well-known/security.txt
Canonical: https://vanabbemuseum.nl/.well-known/security.txt
Canonical: https://www.vanabbemuseum.nl/.well-known/security.txt
Canonical: https://new.vanabbemuseum.nl/.well-known/security.txt
Canonical: https://old.vanabbemuseum.nl/.well-known/security.txt
Canonical: https://webshop.vanabbemuseum.nl/.well-known/security.txt
Canonical: https://mediabank.vanabbemuseum.nl/.well-known/security.txt

Expires: 2027-01-31T23:00:01+00:00

# Please always try to contact us through our responsible disclosure form
# to speed up things. Should that not be an option, then in order of
# preference the ways to contact us are:
Contact: mailto:security@vanabbe.nl
Contact: tel:+31402381000

# We can offer you a swift and proper response in the following languages:
Preferred-Languages: nl, en
#  _   _  ___   _   _
# | | | |/ _ \ | \ | |
# | | | / /_\ \|  \| |
# | | | |  _  || . ` |
# \ \_/ / | | || |\  |
#  \___/\_| |_/\_| \_/
#  / _ \ | ___ \ ___ \  ___|
# / /_\ \| |_/ / |_/ / |__
# |  _  || ___ \ ___ \  __|
# | | | || |_/ / |_/ / |___
# \_| |_/\____/\____/\____/
# |  \/  | | | /  ___|  ___| | | |  \/  |
# | .  . | | | \ `--.| |__ | | | | .  . |
# | |\/| | | | |`--. \  __|| | | | |\/| |
# | |  | | |_| /\__/ / |___| |_| | |  | |
# \_|  |_/\___/\____/\____/ \___/\_|  |_/
# |  ___|_   _| \ | |  _  \ | | |  _  || | | |  ___| \ | |
# | |__   | | |  \| | | | | |_| | | | || | | | |__ |  \| |
# |  __|  | | | . ` | | | |  _  | | | || | | |  __|| . ` |
# | |___ _| |_| |\  | |/ /| | | \ \_/ /\ \_/ / |___| |\  |
# \____/ \___/\_| \_/___/ \_| |_/\___/  \___/\____/\_| \_/
#
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQREqlpTTxTmeWzNnZJxrnJAJ+3hcgUCZ8BiYwAKCRBxrnJAJ+3h
cq3BAQDK7lI2YeI901vCEd2jO6EE0FB0JXqPjwLyqkn9GXxziAD6AuiO0W9haEVU
x+YdP9IDcPiOGLH31cXjF1B9tosZ7QU=
=jeSs
-----END PGP SIGNATURE-----