A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor schuite.com
# Conform RFC 9116

Contact: mailto:info@schuite.com
Expires: 2026-03-18T06:16:04Z
Canonical: https://schuite.com/.well-known/security.txt
Canonical: https://www.schuite.com/.well-known/security.txt
Policy: https://schuite.com
Encryption: https://schuite.com/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeakAAoJEHxEFgi7LYk2PycH/RXd/kgAUBVGdFK8Zx0Bud7Z
XB32ilWAux0mJBfrHUWvgT/th69LgorWK+DKfGsdeKR6LaQ9NPi4vRlTdKrvDCNP
ouGZAYitr0VVL88UeKKAxthBZmzSDcFdz45hj8MhCUjgMrBkPhEqZWknVn3LDs7X
BUxlz9s0btrB006VhhuQhaOxGOVPEkmqWUNj44c7/7pAXUdaSR2AzisYnm6bTr3c
QK+YfhK7Hes3HIC6R4HNwgTkJvZdJxmPA+ch/Cf/E59WNy7V8CrCN633EUF7pgR3
t+awM6Fdo5cgvr5fisrWQ9uZvdExp38OTx2EWygrzwjeV5O49b/EdhmwkqO6YJw=
=uU1y
-----END PGP SIGNATURE-----