A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Canonical URL
Canonical: https://daxis.org/.well-known/security.txt

# Our security address
Contact: https://daxis-ict.nl/meld-kwetsbaarheid/
Contact: https://daxis-ict.nl/report-vulnerability/

# Our security policy
Policy: https://daxis-ict.nl/meld-kwetsbaarheid/#policy
Policy: https://daxis-ict.nl/report-vulnerability/#policy

# Hall of fame
Acknowledgments: https://daxis-ict.nl/hall-of-fame/

# These are the languages we speak
Preferred-Languages: nl,en

# Our OpenPGP key
Encryption: https://daxis-ict.nl/meld-kwetsbaarheid/
Encryption: https://daxis-ict.nl/report-vulnerability/
Encryption: openpgp4fpr:811100944C94E98784B291AC6C447AC1825F7655

# You shouldn't trust this file, once it has expired (like bad milk)
Expires: 2025-09-02T05:20:37Z

-----BEGIN PGP SIGNATURE-----
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=2ktw
-----END PGP SIGNATURE-----