A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

#
# security.txt for Sentyron B.V., trading under the trade name Sentyron
#
Contact: mailto:responsible-disclosure@sentyron.com
Expires: 2026-10-07T00:00:00.000Z
Encryption: https://sentyron.com/.well-known/responsible_disclosure_at_sentyron.com.asc
Preferred-Languages: nl, en
Canonical: https://sentyron.com/.well-known/security.txt
Policy: https://sentyron.com/responsible-disclosure
Hiring: https://jobs.sentyron.com

-----BEGIN PGP SIGNATURE-----

iJoEARYKAEIWIQRr8x/N+X2rOfewajhtt+tcJxvKGAUCaOUgySQccmVzcG9uc2li
bGUtZGlzY2xvc3VyZUBzZW50eXJvbi5jb20ACgkQbbfrXCcbyhgTjAEAsVdRR3Zf
8N4DxJlY1oEocNZtO9ESam3vitX9bulrf4EA/2SvI5Xyx+Z2gIGLvbmkzMLx4lF8
dfnerhMUx89IgXUO
=KpaM
-----END PGP SIGNATURE-----