A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor vastomundo.nl
# Conform RFC 9116

Contact: mailto:info@vastomundo.nl
Expires: 2026-03-18T06:16:05Z
Canonical: https://vastomundo.nl/.well-known/security.txt
Canonical: https://www.vastomundo.nl/.well-known/security.txt
Policy: https://vastomundo.nl
Encryption: https://vastomundo.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeealAAoJEL5n8Olt/8jndIsH/R7uUUv06l9RelXGUVCcBViu
szC/Lz4RMxzjLBMOK5CBr3ZkB/noZSKLnBMwlBNaGY/SXkNFfX1MeCfvwn2FQHAl
+K17liakDq7ZJT3Hf4e28uaNVrDWuW3yU7pqAhAIIMRVNb8QS8DJpg10eW/Ib430
6LTCpZhMbm+SerHcl5sj0R3A3tetM1VpJ62LIMs/FCB3d7KtdO5Rc6McrZzSLTHW
Ismgs+gRh5mT/xkEqbFVxdKzJQwzY1tBjo0SRkIo4aRqESc2KDokk8vYKqPov1ln
ONu2Wxs7VtvNDS0DxDzfByZXxL7melDdYcJ+YGzSpXktU3y5Dcz0W4l4AyVEkC0=
=vBxp
-----END PGP SIGNATURE-----