A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://hovelaar.nl/.well-known/security.txt
Canonical: https://www.hovelaar.nl/.well-known/security.txt
Canonical: https://patrickhoving.nl/.well-known/security.txt
Canonical: https://www.patrickhoving.nl/.well-known/security.txt
Canonical: https://patrickhoving.com/.well-known/security.txt
Canonical: https://www.patrickhoving.com/.well-known/security.txt
Canonical: https://netnl.eu/.well-known/security.txt
Canonical: https://cloud.netnl.eu/.well-known/security.txt
Canonical: https://link.netnl.eu/.well-known/security.txt
Expires: 2026-03-31T04:09:04+02:00
Contact: mailto:security-reports@netnl.eu
Encryption: https://netnl.eu/gpg.asc
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEWI5vYA0T6PCZu197inVCyq/VHXEFAmmjn8EACgkQinVCyq/V
HXF8mw//XMYeq4fDYxjBlihLfkxv7/yWsEcYLHKV0F8VIOlGnm14MukLGkas87Bg
9UFsJSzfg0ZlpkOpQLqHQiBBwaYx0EuYDuIARXySlrOJM7IPscwtvoTfhOerwfOB
CFFY0O2jY6s+zCxQo5pQRmNg/frb8a1+pDr3zVwWc6nsk9smTLoRzSggXMi3ECzd
1qU/pGlzIdvNeoPSlep+oEyqJ82hj96mvJ9Fe6cX9f97arM0oh2TZQFY6/0/0oX7
zqRG9MMP9vGqKHupePGP+vE71FLxFuJsaoE3OYd+ZFWt/OlSke3QOpjg0KfLYZfl
iWwHgD1tjpx+EEIAyoPZBCTjjxaxbojbi6zMnCOKd2vysImXssK175jmVjJQkA16
00xytDxuEiUTqk6YWFewtKPxnQ6/TIQ9jSAiqFEFglWwp32yB7MPTcGUvjhsb1Ip
ijZwtJ+lJdD2vaqclsO2/zYn4RyExJKCYVCzyUlNnOx+foVFlmID3iu2kyY0C8tq
JQgaUYhcF7iwQ3GZYZvEDX0Bl28ljuga0f0QFCP8eNWNQTRdcZA9W69Ia64ZKx9V
nLk+FGCjmdnHOamjybw59843hnkUzb9uL88zt8WebOPnEN6PESncKDQkv8ewTpcw
s0bPkoD/zqWyy1t95Tedtk6cflRX3P06VWFyBjWoCSKwiAHM6nU=
=JJP3
-----END PGP SIGNATURE-----