A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: https://www.kennisnet.nl/responsible-disclosure/
Expires: 2026-03-01T21:00:00.000Z
Encryption: https://www.kennisnet.nl/responsible-disclosure/pgp-key/
Canonical: https://kennisnet.nl/.well-known/security.txt
Canonical:  https://www.kennisnet.nl/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEr396uaPxyuMcWQ2q5Y0KyLQH6ysFAme/K7UACgkQ5Y0KyLQH
6yuFRQf/XATKvhgK+z5uZYp4oVtoYcnEJvZIc7IwRukCAUApxtSY+A3t6VzGkaie
lDU513jlNYa/mMIidUGiZ8kgzdQGbm0eA0Gzjop0Iz8eqPjd6gyBJ85Z0qPuVvuB
wI0agao/BiAD+bYzMfCeLplhO+2HQo4Lj2zJiqS0iJ0Lxlds/BoKwfN/b79T9AAv
5EX5ZPEqAV9etifQ9vZOpDJc+FRPEBaz08LX+TgNJsTXvmofYMaSFJPfptifkX5S
4bVUOjnJXg2giW4Zy4f34rpIZeeh3aZ1JEL3ijnjvA8MFdMp1eJW+Fqg6z67K8I+
9+vyd/ri3KhTVmuiRQXFvu/jPcUTyg==
=xvMZ
-----END PGP SIGNATURE-----