A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor vanderluyt.nl
# Conform RFC 9116

Contact: mailto:info@vanderluyt.nl
Expires: 2026-03-18T06:16:06Z
Canonical: https://vanderluyt.nl/.well-known/security.txt
Canonical: https://www.vanderluyt.nl/.well-known/security.txt
Policy: https://vanderluyt.nl
Encryption: https://vanderluyt.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEoJ9iOxWBI2ygjAVThI6Y5b5h7NIFAmh55qYACgkQhI6Y5b5h
7NKMNgf9FZVN1HtLzI31zxoFUeOtjKr5vp73DHBZwQ4D30a7zqOcS8ynBCD1NvNA
nM/SG2LeV4pjTZK3am/PmBhVGjXKQJB8WHSIjIa+wDsjqcEsw6vcwGLO5yFAXr78
xhaf8sdTqG3CxuflbF99Ay90zyLk9e1ArYAgRiL+m/kJv8JpsNaErqdxsP2XNhlu
bUJN9k01+nXqctwI4OoniMEPNFCe+eEVS6gWdIq4E6dEP99RdFBnnhXphu0jSOwF
nVcZp4y8E8cdWDy8fpS5LWZcoigfgvGK8m2e8VemKI+j1TauhFISb4hRH35WS7qc
edA+sH7dCtVnhFoidRBdPlSjlf+hdA==
=0Qlk
-----END PGP SIGNATURE-----