A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Security.txt voor paperflex.nl
# Conform RFC 9116

Contact: mailto:info@paperflex.nl
Expires: 2026-03-18T06:16:30Z
Canonical: https://paperflex.nl/.well-known/security.txt
Canonical: https://www.paperflex.nl/.well-known/security.txt
Policy: https://paperflex.nl
Encryption: https://paperflex.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEP7+1D6+45+r7XfvqBC2RvPS/cwcFAmh55r4ACgkQBC2RvPS/
cwcD6AgAyQ3DTFDq0mfKg0UknT4Lh0PMS4aGYoanpMm75CHdypUBnoFrxzi5q5X2
enpOEpoW+lj55fN32dDKRibbPb3jfo7LWFy+U23GwwjtT8TE9jVNEFOc9MS5e9NZ
DIg47dK3h4Cldkvw0M3ShJM5ANWAUBwqy7mnwFtqtrTAnv9qr1FBCNIqXij0Z3PB
m5ROxgm4IdojAJxmQa3I7Iq5rn1UYm6t0VtCi4qesKQI4Qkk3BeQ05vsfvqyYvsb
264Rvwjiq+M4EKXdKPD8TKezm0k6rpKHbrcdnyHpNDK+JiFEQJ0uj87hw9uUSKO4
uwofgxSOwPgv/xDxCe6zQne1pVCCsg==
=VJnj
-----END PGP SIGNATURE-----