A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: https://www.xel.nl/contact
Expires: 2023-12-15T23:00:00.000Z
Preferred-Languages: en, nl
Canonical: https://www.xel.nl/.well-known/security.txt
Hiring: https://www.xel.nl/werken-bij
-----BEGIN PGP SIGNATURE-----
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=Iibi
-----END PGP SIGNATURE-----