A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

#
# DigiDoc RFC 9116 security.txt
#
Canonical: https://onderwijsspiegel.nl/.well-known/security.txt
Canonical: https://www.onderwijsspiegel.nl/.well-known/security.txt
Expires: 2023-08-29T17:56:25+02:00
Contact: mailto:csirt-20230729@digi.nl
Encryption: https://onderwijsspiegel.nl/.well-known/security.crt
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEafsp/x/ghTbzVYdVrxuRONDZJJgFAmTFNqkACgkQrxuRONDZ
JJiBswf/ULEFttPxLYIh47U7uJPo+AkheVxwRqE1tACEjBd8P8SyMo0vy+jgBQZP
OCScpXY2CAwnqDMhW2388VyqnFgMAvEx2IAiz9MpHYhtqoKq9qE+UKw/1lnbwNyz
GVIOdowQiUXSNlQR90M6YTL/paecLDv4gFCpn3ZeM6HKDluZTSIG3Us42YttCVMc
1eSgoYsat2MVlFdqx5zFk4350KSngoF9ycpt6/LLzo+Ng1c7zH3vLE7PnxPirFsX
plrQYgOllXKBqTLTMIYqTnWnMPS/D7d5GIDy/QOaZZtkrCUJyDP5joU7Nm3AAhQN
ykIxe9j6OvIr23VTS8bSJpXT7IvqkQ==
=vumO
-----END PGP SIGNATURE-----