A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@shockmedia.nl
Expires: 2024-02-12T00:00:00.000Z
Encryption: https://www.shockmedia.nl/shockmedia_public_pgp.pub
Preferred-Languages: NL,EN
Canonical: https://www.shockmedia.nl/.well-known/security.txt
Policy: https://www.shockmedia.nl/responsible-disclosure
Hiring: https://www.shockmedia.nl/werken-bij
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEdfb/Z+m9qize+DaeCPzEiVsZJzkFAmPqK7EACgkQCPzEiVsZ
Jzlq5A/+N08hueos+trQ73GJeen/XgIPQZY8bsn/jSiN+IZ0WO6U7LG7lqkQd4eH
y1kE3fVYk9DYdSkWKGPDpKEaaPJZIs9NMjM62yGlK/sUH9N/4ThEMe+DdUSrjmG9
3PtW8RLto3MmMXNQ6PnkoxoMK0L8a3VBq55KqMw1AWoaOfJzenOk/9NDJ1CUriq/
mflFQBG02L7vTarNQlS1RFCl05NF4EeenOK7Vbz79qgLxZ5eWaF7N7K4FCWeDV+E
rzc6XqTgtmscYN76kJQN3SKO0M5cvWvWNBhPqT3qTP4wre3L6VPv3CYkfJABbDyz
DtRApk1Eb8XTNE3e00da9h4E+tLyB4AxQMgwbuPijHa+mAQUHh5EtP9ogDf7C6VS
CMUOMqBCQAZKEXXdzQywILmy1peSM8gtmbJcba92MxFCslrqBWLb+Wt/8GRxEuYQ
yjshYg3X+cNBBTapuot0EbwEGdxvsGYys9ZRr1yxuPweOm9gn+kAXpNdlITqqSoH
nEZsRlPxxiQURFpTRxx7mkghhUCniZHIDBxkA0XTvE+H9rbgPhoxnPcD0ZXlbqdh
3io9oFTfZLmwrRiOTbNwWWp/s/twjiwIC3uNtnKRoC6/kddxeDsN9Q8Nwb02MxXM
eUpYWkkheSwDUZ7sbB/NQlHAkMhdM9H+i0ov3so87aDLTHMcWRs=
=hmQv
-----END PGP SIGNATURE-----