A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://vnissewaard.nl/.well-known/security.txt
Contact: mailto:security@isaeus.nl
Preferred-Languages: en,nl
Encryption: https://isaeus.nl/pgp-key.txt
Expires: 2027-02-02T05:19:44Z

-----BEGIN PGP SIGNATURE-----
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=Hj2+
-----END PGP SIGNATURE-----