A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor inzameldoelen.nl
# Conform RFC 9116

Contact: mailto:info@inzameldoelen.nl
Expires: 2026-03-18T06:16:57Z
Canonical: https://inzameldoelen.nl/.well-known/security.txt
Canonical: https://www.inzameldoelen.nl/.well-known/security.txt
Policy: https://inzameldoelen.nl
Encryption: https://inzameldoelen.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEKZJEo/z/rntoHIq3TKWsvC/99kkFAmh55tkACgkQTKWsvC/9
9klNlggAi0ppi05AfRAO/qBQvqld8TtG6G6Sv7RAUaP7KOZJsc53jWulP9LYFeaX
Srk0oW/vhfNvjSilbTRhW/QsmVFWFRhQWPImvGMAqu65vAAjLTKBviiiRAZFx1Vn
m4yWJsNzTMqzBzK1jd+MQy7DKUMsaF4KpDRGXADpZVN5o6TbzoxI75/peul5ZxDg
knAp4z4hPkOgcnfkSO5pS27WYMXDBgFWxHU0GRG7ycPTHpiJPPJw2y3QEpmBvtSu
V6I+neS3hjHw/0QCuK7rtN5B64t9axpLUcKyymWxz3CZS2nPOZrvIYBPTzrryw/Y
9NtHz7O7mKCClFjqjHf8UfLvX8xWvA==
=f5s/
-----END PGP SIGNATURE-----