A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor alcopak.nl
# Conform RFC 9116

Contact: mailto:info@alcopak.nl
Expires: 2026-03-18T06:16:00Z
Canonical: https://alcopak.nl/.well-known/security.txt
Canonical: https://www.alcopak.nl/.well-known/security.txt
Policy: https://alcopak.nl
Encryption: https://alcopak.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEek0YaMkVy5DKcsIJDl0i+UxVnlsFAmh55qAACgkQDl0i+UxV
nlvFywgAzxeacRcUx8EB/GpBP1OnZVCkU9E3lBktUzkIeymBdW5F0uEeSIjWAcZe
1saZhkUjYzFCzkoDsu+5GGt4w1mFUzM00t6CFdtFPrAM7AQI4u0P1/Jze1p6bNo/
qY8wppd2iTNmotcU5ulnIiAgTz2qxwen7PxYO2rudY+lPYiAmZnRE0JdCkna9D9j
RdAdt8w47trzooM7y5NmHgVEkz3L8AOz6oFu+C46t1UZJBH1HaSQQB53RPpbmKxb
TcnCKvVpoX3dxHunuuAdqwYmV95VnbNGwIDO3FRI0kEhQYOXVVKschRGJtWcWY9t
STptaLw2zhTHO+k2mIUyxouaNgd3AA==
=e4vE
-----END PGP SIGNATURE-----