A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:sys.anchel.nl
Expires: 2025-01-01T11:12:00.000Z
Encryption: https://anchel.nl/key.txt
Acknowledgments: https://www.anchel.nl
Preferred-Languages: nl, en
Policy: https://www.bit.nl/nl/over-bit/voorwaarden-en-policies
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEYG/tW9ZSOx8F7vAtTibpslJNMo8FAmZq9TAACgkQTibpslJN
Mo9UCQgAoS8K0Yeaa89m2m3PZBEnwFusBNS6QFQF38ts9JvB/eepyoBd+eQxLsi+
2HT1F0WNg6cFLCuC7kyBZRfm8ierIoOrRwEt0sTJfKAW6lUr/NfE0Znn1ligbZe+
mAMgkA6Yhg1asAReIop7MW/ziMIzgft0Ih9uX3r+B6/x0ogija6qO7Ut0XYFmsqc
GnqoyFRMx7G7FA2cD6XblT2qVtMf4+uKD8Lbi9u8Y3a0EydPR1qUSN1JMTbXjOHa
HWzjHuToFBn/PaQfA7svwzgMQkFro/rxBIUjgR29VuW/0HgrYc0Wq3rQ+nBblkDa
lBR5eBJ7Oo5ahCYa6y9wvGz9XLsy4w==
=7DXt
-----END PGP SIGNATURE-----