A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor keyquest.nl
# Conform RFC 9116

Contact: mailto:info@keyquest.nl
Expires: 2026-03-18T06:16:20Z
Canonical: https://keyquest.nl/.well-known/security.txt
Canonical: https://www.keyquest.nl/.well-known/security.txt
Policy: https://keyquest.nl
Encryption: https://keyquest.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE4tPv1+sLn3DHrf1xaiqLo2HFFU0FAmh55rQACgkQaiqLo2HF
FU2ihAf/ddLtEdo9GHJoSOfVXAdWuilcVStvGotIy6AOI7EyOYWZ2XM11B7IySLg
ii+bDAxVEvFk4Qrf7l0ljxVgxL9QPy3sj4i09ZVEGoxwRVICq6XfHUucdSolEEw4
z8iyLOBFGI3VF+qy8vsmtxWaMstnduiJolK7uJ0gFbXved2tXvDCtCC9+/PtQSYm
KCVJuyiEcDtkN0SXZlLbXV2fu4bgKcL4wOJtnSLYZ3fYBEarmxKjGuN2mybMu24r
fTBCstkRtBn2Tw7ID+xIgW+o15BrZjSqV2gu1y3lAtli2mzGEg7oDo4Jv2Bmgsfg
6o1qzSiFz7Rab5jx2wplXP+w8ePhlw==
=g96M
-----END PGP SIGNATURE-----