A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Canonical URL
Canonical: https://daxisict.nl/.well-known/security.txt

# Our security address
Contact: https://daxis-ict.nl/meld-kwetsbaarheid/
Contact: https://daxis-ict.nl/report-vulnerability/

# Our security policy
Policy: https://daxis-ict.nl/meld-kwetsbaarheid/#policy
Policy: https://daxis-ict.nl/report-vulnerability/#policy

# Hall of fame
Acknowledgments: https://daxis-ict.nl/hall-of-fame/

# These are the languages we speak
Preferred-Languages: nl,en

# Our OpenPGP key
Encryption: https://daxis-ict.nl/meld-kwetsbaarheid/
Encryption: https://daxis-ict.nl/report-vulnerability/
Encryption: openpgp4fpr:811100944C94E98784B291AC6C447AC1825F7655

# You shouldn't trust this file, once it has expired (like bad milk)
Expires: 2025-09-02T05:20:35Z

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEgREAlEyU6YeEspGsbER6wYJfdlUFAmg9NKQACgkQbER6wYJf
dlURsA//Wv0i+3qNuI5uF7An4O18TCDQbO7uZOdX1zqv0R7cya2xP7DU8uBULvAr
zPVSiGNX5YeIp1NitrKUkV9H2wSd8vHoxmVaMaL/peLTpFxK9Gc4/31Y4rgFt3Fv
/wm2ABUB5gVMuwZN7bbK6f7hz3Pdm5IKtnfTlLiLh08Gfo4yFUhFhlbgfyA/cWzm
sT2H9f2rYvqckHt+ato5PZE+2NnkQWGuQgwki5Iw3sHlJdG84MBZywrC3HRir0xm
m3FS5fuV2TH8B9+VDfRm82nHTMnJdCPsr9BsB2aYBjeKEP6U8V0xtb+OOIgw/BN7
bue13sN8rF1CUY4cMFjNPFxFzgPlkkxvzUU+qIcc0Jl8y1jF6X3/ZwHYGprMvH5N
mHhQe9371Lfm3LJkERNW6c3O9LnDCIg5dKqSrEp6rYxW0YbD6RFoJf7cPhgZux8f
P/IuxEkFRRpfMXO39hOnTcA4GvPTnIqW1nIdvaTfUPSYA9HY6P/KMgir2H4bKwbi
efITLbJvsw0YlstyV1J6WMVyEUiFioagXWTe/OcamudP35xi58Qkpouy/HWbp7sn
Bch68Xttei8T/y3JRXec4Sx9imEmFbQTqI+M++BQiXb8Y/PpC0MYWC/n9Gd7ODk9
Pib3jU+u2uWjPVQzUFWpuFG8XT2KCBhJQJfv+TH1zOg7jLGM+9Y=
=CPfB
-----END PGP SIGNATURE-----