A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor babsbouk.nl
# Conform RFC 9116

Contact: mailto:info@babsbouk.nl
Expires: 2026-03-18T06:16:03Z
Canonical: https://babsbouk.nl/.well-known/security.txt
Canonical: https://www.babsbouk.nl/.well-known/security.txt
Policy: https://babsbouk.nl
Encryption: https://babsbouk.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeajAAoJEHxEFgi7LYk2lDkH/Rz+AZBfgtDIN9fUII41Om0f
uJPWb7IgmI0jSV3tnGAxM2HqGJtq7lrkGXTap2s4EM+9y6LlD4A3mPLEAYRXXTTf
+AMAJYXc0xMQicQrjthRLYfcWB1EcltNq5/HbOxAi24t6yxLzea1cMaenb5CqpxS
ByloUOIDZNhi9YAO5AztaUDAdLlXDR8Bg9q8fn7dffV3B3MEwW7totjIEjmVeO7k
T7HHk2ylbTMh2xV+kHzhoDHYWDjl5UIN95knPzfawnQU2VXS9Zklz4+OQ+BpSvXl
bLTtGYvITrsvmlsHUrX9goPQAHMMwDvt9hsmGdcBdOrvPv+3S+wwb1s4dP7V5w8=
=D1PI
-----END PGP SIGNATURE-----