A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA512



Contact: tel:+3130 639 62 22

Preferred-Languages: nl,en

Expires: 2026-01-20T00:00:00.000Z



# Canonical URLs

Canonical: https://onvz.nl/.well-known/security.txt

Canonical: https://www.onvz.nl/.well-known/security.txt

Canonical: https://www.vvaazorgverzekering.nl/.well-known/security.txt

Canonical: https://www.onvzjaarverslag.nl/.well-known/security.txt



# Our security address

Contact: mailto:Security@onvz.nl



# Our security policy

Policy: https://www.onvz.nl/veiligheid



# This is a PGP public key that we  use to sign our security.txt.

# Do *not* use it to send encrypted mails to us.

Encryption: https://www.onvz.nl/.well-known/pgp_key.asc

-----BEGIN PGP SIGNATURE-----



iQIzBAEBCgAdFiEEBaBbLar7yzJb2/ZI9LEhhdtrfmQFAmeOO2YACgkQ9LEhhdtr

fmSXOQ/8CmxFmWV+FRJqiEKeyIGQj5juZ4puThpWjOk3uiYsHX68lfpTOv8+9Mci

d5CvG8scuPqIlWGsS9iyS8S2PJXMwRfO+WRzjjfBgsKscCF5mF4UE7FiNa9j2w2B

eLUI3Nyexuz/JJ3HlMX2o5UH/lCKDowFXR9s5agj2kURI59mU9gS/4fxtBG95D+v

qdiXPrNHmxtVzRvSeNzF03/t+L0f7jK1T2AO//XaA0WC06mmwjHOhl62PJUfOte+

Egvg5XVN/VIn3YlgK5HCW6AVpN+YcGu8mKRtXwtxOtQ5WgKeRmYFjLfGO/nz5BC5

p9VT0A+ADSTh6eCteAjpy87XZYRwKKbdOpL1x4E6x1GleQwvbyp4Mj5vqBK3eKQW

zmhxtVeWUtjToThsrY8J/jU0JlnHTxKdnnJCrDHvIxxHoqBgJ06pxCxRDcrqtmiG

EH8NSM02k6dfQ4vSt7835QFbsDLh+oZmuKmgfVEimsehYVWt81ti4cPk0c/hGole

492+oCyZV3ozymQMOwRA4PyVFij7jNnLQxu5B0ReG2aZdG5QmqvMvQQA8ULS93G9

EOgaCVZHglW04UZBT2+CQBlr1qAVHTmOq7JOoKc5JkljyokRvzMobnies395ZBef

QL9KV3/UZgx3FhD+0LSsOGvg59pmDrTd5JR8V68tp0Xw90sfctE=

=/Kz0

-----END PGP SIGNATURE-----