A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor pgpurmerend.nl
# Conform RFC 9116

Contact: mailto:info@pgpurmerend.nl
Expires: 2026-03-18T06:15:52Z
Canonical: https://pgpurmerend.nl/.well-known/security.txt
Canonical: https://www.pgpurmerend.nl/.well-known/security.txt
Policy: https://pgpurmerend.nl
Encryption: https://pgpurmerend.nl/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeeaYAAoJEKE7OCfMwZPa988H/iNpP7LUFQwthyx3tkjI2JY9
vgf1eeFVY0TSnCY9fqRrOA6M3ZK1vbjoyBBMyqdi7vKcStGFMio67Pd+3y8+/h5S
exksnPb8fbi9qlIcGTzYxyzfYJX91k+2man04gXI2niCf7BdY8oR3iNNKzjPJd33
aoP2woP1PUnGqbRhsGztXguqMQovYSdzxezT39+TXaG/k73jVP5tOc7mlhziV5n3
pZp1EkCcDfI0wjKrX3m/eNPdsIDlXGf1JRwagukA53/WTMOJokuHORpooeXxvTEB
nqoCgU7m7mJFaF8nXzd3m7AtAzOY39BcX7lC483aGTVlc657ur5gBWufUW855uI=
=TqYe
-----END PGP SIGNATURE-----