A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor amitec.nl
# Conform RFC 9116

Contact: mailto:info@amitec.nl
Expires: 2026-10-04T15:50:17Z
Canonical: https://amitec.nl/.well-known/security.txt
Canonical: https://www.amitec.nl/.well-known/security.txt
Policy: https://amitec.nl
Encryption: https://amitec.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEErbYA8+uFy4rwzux3L1FTe4DE3c8FAmmDarkACgkQL1FTe4DE
3c+qCQf/X2NWqAd5cUifgT13tic5N49H84LkNveHUwvsmV+8C19ECH1tbyrb0XMb
ULP6VtoibTtPNxsEcEs1OAXFFSm7DFX/CetcmJMDTCWoCqTe5WLAHnN84SvyYMzI
4sYS1h6kSG7VY6RtV1w9hx6CUiy6CeQwZX+F3c5EZpFtIU3Hn3mgf7eK/1211zl9
nmO/VVCKnwwozSmuvwdgz7Ne4t+ukXullP0D4npuRKh+80N3mP6ngZR6L0WfmOnL
EWfrQ1+cw/g4JwZfd5EtpBAEt+81tlwDaWyq76EeKmEcu4RVff3UUWH1EG31mkwv
+nc/OkRSQsDGjXtmEBLl4r83929hcw==
=gXqZ
-----END PGP SIGNATURE-----