A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: https://www.indicia.nl/contact/cvd-melding/
Expires: 2026-08-01T00:00:00.000Z
Preferred-Languages: nl, en
Canonical: https://www.indicia.nl/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=YCIf
-----END PGP SIGNATURE-----