A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Canonical URL
Canonical: https://daxisweb.net/.well-known/security.txt

# Our security address
Contact: https://daxis-ict.nl/meld-kwetsbaarheid/
Contact: https://daxis-ict.nl/report-vulnerability/

# Our security policy
Policy: https://daxis-ict.nl/meld-kwetsbaarheid/#policy
Policy: https://daxis-ict.nl/report-vulnerability/#policy

# Hall of fame
Acknowledgments: https://daxis-ict.nl/hall-of-fame/

# These are the languages we speak
Preferred-Languages: nl,en

# Our OpenPGP key
Encryption: https://daxis-ict.nl/meld-kwetsbaarheid/
Encryption: https://daxis-ict.nl/report-vulnerability/
Encryption: openpgp4fpr:811100944C94E98784B291AC6C447AC1825F7655

# You shouldn't trust this file, once it has expired (like bad milk)
Expires: 2026-03-03T05:10:04Z

-----BEGIN PGP SIGNATURE-----
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=Pb9Q
-----END PGP SIGNATURE-----