A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor roimedia.nl
# Conform RFC 9116

Contact: mailto:info@roimedia.nl
Expires: 2026-03-18T06:15:56Z
Canonical: https://roimedia.nl/.well-known/security.txt
Canonical: https://www.roimedia.nl/.well-known/security.txt
Policy: https://roimedia.nl
Encryption: https://roimedia.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeacAAoJEGLrBd/pSa+Ej1oH/0pbxs3nQeqv1XMMIYxcQiV6
4KEywqREDSA0w4N5aiZUDj64BGek93/2+xSWi2eeBrleut5Al7WiKJayEQgZkhJy
9rCMcdn2pkR7GGXaWJSKabNQvCSTrEdWC8s2elgFbgB4zS4ytdZoA3C4Dsq53ePr
kj9RqtPaLVXQx51/ttnVHyuYjc8koi4EFgjf43RTevnJkQdyN7Skmds2eL2vLpUb
wANYWYnn62oOWCv3Poz/tnOVrFqm/gRQg3bpwqtNfi19DF4s4rzgAyL+Slc9pmqu
stVcgK/th43CTnEzzUUTdrYNkUFO8dYPJqP8epPtMbiVupuShe7EY8WO1QjbW1w=
=3qcm
-----END PGP SIGNATURE-----