A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor casabrut.nl
# Conform RFC 9116

Contact: mailto:info@casabrut.nl
Expires: 2026-03-18T06:16:07Z
Canonical: https://casabrut.nl/.well-known/security.txt
Canonical: https://www.casabrut.nl/.well-known/security.txt
Policy: https://casabrut.nl
Encryption: https://casabrut.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeanAAoJELEQK/TRkMjUdIIH/jHvWJ7FrBWcoSGVvHSOkvjk
GwqSOz4Wz6F+YT63by94r9UCzx8POMJTHP+eaTOZTWG8+8xoQ5Xr353evxlpNTII
TfpPICPI1sfZ+AnOAe60jC3Je+GXQQCXk5tiqlGfYXs+3212A4IUQeYwj/bF55/u
1gry1h5zo2eANwozm6ES2uAPZ3ygVfQ7bK6RCVf0gtFujrm/56NOxkEbsrYCuoi4
qNPknIYgtrvFTI9bQFQiI5HYBkRFWGCFnhGLULKtYCfH+LKZcyNBTqwOhi5KV+F1
23MGmI3QEHzwT3dqnA/L2G6J3XH3aNlrAZ1iI5d6a8EOaifR9LqJxkQucz43iN4=
=8ad/
-----END PGP SIGNATURE-----