A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
#SVB security.txt
Expires: 2023-12-12T22:59:00.000Z
Contact: https://www.svb.nl/nl/over-de-svb/hoe-werken-we/kwetsbaarheden-melden
Contact: https://www.svb.nl/en/about-the-svb/how-we-work/reporting-security-vulnerabilities
Contact: mailto:responsible-disclosure@svb.nl
Encryption: openpgp4fpr:B4A38FCB17BF68E3E9FFB1CF95666867B017722F
Canonical: https://www.svb.nl/.well-known/security.txt
Policy: https://www.svb.nl/en/about-the-svb/how-we-work/reporting-security-vulnerabilities
Preferred-Languages: en, nl
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQS0o4/LF79o4+n/sc+VZmhnsBdyLwUCY5r1KwAKCRCVZmhnsBdy
L8iIAP9DtBOPEB0UsbgZFPDeNurVC7Mc6rnKQvxPkAFIxLBtkQEAzLGqKNqStOxf
7fZXy9IuU90Dm08rIlwwcjy0P8BE/wc=
=PDNN
-----END PGP SIGNATURE-----