A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
#SVB security.txt
Expires: 2025-12-30T23:00:00.000Z
Contact: https://www.svb.nl/nl/over-de-svb/hoe-werken-we/kwetsbaarheden-melden
Contact: https://www.svb.nl/en/about-the-svb/how-we-work/reporting-security-vulnerabilities
Contact: mailto:responsible-disclosure@svb.nl
Encryption: openpgp4fpr:B4A38FCB17BF68E3E9FFB1CF95666867B017722F
Canonical: https://www.svb.nl/.well-known/security.txt
Policy: https://www.svb.nl/en/about-the-svb/how-we-work/reporting-security-vulnerabilities
Preferred-Languages: en, nl
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQS0o4/LF79o4+n/sc+VZmhnsBdyLwUCZzr0kAAKCRCVZmhnsBdy
L+AVAQDJmnSPMmSOHZNdjTJmLUTp6RsxnUcjU6t3DLZqgqe+gAEAtFaefJwaUvt/
QjehMF6SfReJeFnT1ekVaZWvz9pzUQg=
=trIS
-----END PGP SIGNATURE-----