A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor vioolles-gouda.nl
# Conform RFC 9116

Contact: mailto:info@vioolles-gouda.nl
Expires: 2026-03-18T06:16:27Z
Canonical: https://vioolles-gouda.nl/.well-known/security.txt
Canonical: https://www.vioolles-gouda.nl/.well-known/security.txt
Policy: https://vioolles-gouda.nl
Encryption: https://vioolles-gouda.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE+KD0RsxsDZZmrD2AkHlwoFCMsccFAmh55rsACgkQkHlwoFCM
sceMOQf8CplaHDC5MTkc9hHOCpBDwisOUhm7V9MhhYOmViNtYrJhlSwzGTNBboAH
T6FLBNBEmHs/go+4ekLVeF4FfAJyT618RDvbYIlNbJsZ4Ej/SsNnzmmW6W4hCOxI
n2QA92gD8bzV/SuX76lekL4hUc1EGQSpr+T2fklDibAaKFF8CnKVVegZgpBhIPUH
p6Pu2htk8VS56ULn8fyNxp6P8bP1hml4PJhT76xrpQiQEWznERwY43l4NyMyMzD6
VKkjKsrE4XBoSyw6hxxkjWg3T+D12qFWZ+cIXCj4PvlAMUq1RB6mCgfIXdwD/FQ2
A8DDhBryRXIIQDog6rlk5uOd5azJNA==
=u/El
-----END PGP SIGNATURE-----