A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Canonical URL
Canonical: https://daxisict.nl/.well-known/security.txt

# Our security address
Contact: https://daxis-ict.nl/meld-kwetsbaarheid/
Contact: https://daxis-ict.nl/report-vulnerability/

# Our security policy
Policy: https://daxis-ict.nl/meld-kwetsbaarheid/#policy
Policy: https://daxis-ict.nl/report-vulnerability/#policy

# Hall of fame
Acknowledgments: https://daxis-ict.nl/hall-of-fame/

# These are the languages we speak
Preferred-Languages: nl,en

# Our OpenPGP key
Encryption: https://daxis-ict.nl/meld-kwetsbaarheid/
Encryption: https://daxis-ict.nl/report-vulnerability/
Encryption: openpgp4fpr:811100944C94E98784B291AC6C447AC1825F7655

# You shouldn't trust this file, once it has expired (like bad milk)
Expires: 2025-12-01T06:41:24Z

-----BEGIN PGP SIGNATURE-----
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=OxKR
-----END PGP SIGNATURE-----