A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor fashionaddict.nl
# Conform RFC 9116

Contact: mailto:info@fashionaddict.nl
Expires: 2026-03-18T06:29:03Z
Canonical: https://fashionaddict.nl/.well-known/security.txt
Canonical: https://www.fashionaddict.nl/.well-known/security.txt
Policy: https://fashionaddict.nl
Encryption: https://fashionaddict.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeemvAAoJENQ2VRk6uyjl7bIH/jpUx8Mf1iQL2V5RaWVZCXbO
jYwpMmqBdsWfe5gW/LOYBtbZK94YASGmk9gxQO6ZLx5+M8y9V+WxC0/JY6wQIk1/
ORxVD85Z7/ttNl2faxXGuIXGMeeA+u8V13LbDwoFmoTGtW/Qe5GudhF85wo3s52c
N3GfloV2UNzoiTZfbnS7fz4Gp3yVCqy26fVU0DbsSbXcVA7uAKhmZFGgZw7GYJUD
2MLezpIS2NVe1KiGKph7Ehfpz2+9YnHfyVYafQRdIl3B3xO/bMPZkGhDQsNNTtne
qHKbJ5AHDksaR4pFXFjcEaa4qn6THjRq/38VhgLWLJZ8Zi2VO3C5bf+EgKK+Gzc=
=seWc
-----END PGP SIGNATURE-----