A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@dmcsecurity.nl
Expires: 2024-12-31T23:00:00.000Z
Encryption: https://dmcgroup.nl/pgp.txt
Acknowledgments: https://dmcgroup.nl/hof
Preferred-Languages: en, nl
Policy: https://dmcgroup.nl/cvd
-----BEGIN PGP SIGNATURE-----

iQGzBAEBCAAdFiEEuWFqRdJ97uByUmSecwNEMs5TtKkFAmTIy4EACgkQcwNEMs5T
tKke/gv+O2nO+OdiD7/+wp9b18emq4OXxknROJrAikvbt8csbLR0MFw2klXLbLNy
igpZoMzeKJoY1mHHodDMEeGwQ8crF7B8g+Dp0n9x95Up3HthwHyE0GZipEEu5RtK
W9m9z5fwF2TPJsfdiLJLSAFYTDTufGOg71GKp/Iljx4PC7m2H4h+QbkeIifxl+It
CFxZR/0Jsl5Cvr+3xcjwApwcFyAZtKQtXEnzShReR3vC/fS8dPk/IhyhucICH9VZ
XvaVzx1uhX9j63nl5BRDwMM5z3FeUQKO4h4LZx8+EpzjT5JEZntr0AVjXlGNs3L1
m7fKGSzy97UFesQhENmNw4wJIzaeXARPoCL5vEJImRZLWydhDYCwRinaiMcEKaw2
kM0OIj9nTvxKs7ohQcZvrfJCBY1UA0yPaOTxyS2LGx3a9TFWHlTPY4cyoAU+1IRV
BjNgQKRPxfdmYWKcI4iDzIAYqx4fsr/KroKtpGFRX+dL2o6BtUxariW4Yc5WYTlT
IDMheRac
=JsxM
-----END PGP SIGNATURE-----