A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@vd-molen.eu
Expires: 2030-12-31T22:59:00.000Z
Encryption: https://www.vd-molen.eu/.well-known/pgp-publickey.txt
Preferred-Languages: EN, NL
Canonical: https://www.vd-molen.eu/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=9se1
-----END PGP SIGNATURE-----