A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor dewalvis.nl
# Conform RFC 9116

Contact: mailto:info@dewalvis.nl
Expires: 2026-03-18T06:16:17Z
Canonical: https://dewalvis.nl/.well-known/security.txt
Canonical: https://www.dewalvis.nl/.well-known/security.txt
Policy: https://dewalvis.nl
Encryption: https://dewalvis.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEQQvgtP9VMmYmjVEPtf4obG3zvB0FAmh55rEACgkQtf4obG3z
vB3uYQf/c5WNin6Sdsrhg//KfREi/8meeYNccx9zXexQDUexykGFf8aj7Uxv2Cmt
UMgGUuJaNSmZrXeFbBh0p1BbeiqSa5p6z3EQF/oi5xiZWaSFId7oOwBzonrlDYJW
MwY+Mx2kvgWEBHHP25lBfcpB4CZInJplpj/qHPQ1N9mEkSnad5LzY0NoGaI5+6cF
Wwa0B56T5FLlBnV2srz0rQiyXWdhBOIL+ZivDwzhnZZ/+e64yzmoLbjshQCTTlUf
Oq737vPVy/IEONQNfFEBS7Ylqpujw0mxKPimlC1PdtpBvjhisxiLLDAPZfWQ22PG
S/IaDdGg/tLJBua31z0XQhyKjy7eRg==
=YfLi
-----END PGP SIGNATURE-----