A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



Contact: mailto:info@susa.nl

Canonical: https://www.susa.nl/.well-known/security.txt

Encryption: https://www.susa.nl/pgp-key.txt

Expires: 2026-10-23T00:00:00.0000000Z

-----BEGIN PGP SIGNATURE-----



iQIzBAEBCAAdFiEEOcCYxp4ZEo0JpNXg/P46KVoOg5AFAmj/StwACgkQ/P46KVoO

g5DiPw/8CpWgC2t6uBbM69OrEy96nJkUUU9cW/34aMNCzJ6JxHsgollgvfFVN1Hf

A7lr80NcpYO7BJ0NzPbkiOkNcXd+OJZRYHi5YMcoNj2mdzaYTe39G9ffe+9kVbQ3

X8xvDRtgtt1esKVcKxs/S4KRUyfta1yZMzJohg+h1d0S+x9GY8DOLN7e/YTsPjGf

IquTUgBs5PTEgBo32UL8FJcox44jCgyXODmsmmQP/jWbsOmF44+GVUISSRiKa6y1

5EOPwtPIiUZEg65AXIehTmGt4rdDAsy53u6P21+O2sL6tGDpePs5vrogpMkhy4xG

nQScO9ENHfBZBfCFjEZiQ3wb04QCC157IZhM3Q4Ce+s0Gd9wrHcVoAVf6bYkf9hS

56mBvAGxdvQcdzPYTVmyZ16KNfxTecQFLWUJ8ryG7UdnBrVSWk8elHQGhG6UT8ZU

MtUOM+xlv8jF3Njfs6xNuc+aj0MZ7O1JwcCUwMFjXfJICuhroJFNf4RnWtLNOB+9

PsrMv+bZtQ12hy980r2tyOoajQjW4IoSEPQZeuDjxzSFS7RmhQVm0XDOhqBTWDSO

XzShSqP4L9p10WReEmX8JGJsbyFkD4pIu/0fH9vR8/yoRy3SNDVErhaoXPwa0c85

E3dR9sk3LLRdIaIfg7ELw1e9wS06Ng2M0qbk1Oyyet5gbn3EsF8=

=fuSr

-----END PGP SIGNATURE-----