A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



Contact: mailto:security@afas.nl

Expires: 2024-01-01T00:00:00.000Z

Encryption: https://www.afas.nl/publickey.txt

Preferred-Languages: nl, en

Canonical: https://www.afas.nl/.well-known/security.txt

Canonical: https://www.afas.be/.well-known/security.txt

Canonical: https://www.afas.com/.well-known/security.txt

Canonical: https://login.afasonline.com/.well-known/security.txt

Canonical: https://idp.afasonline.com/.well-known/security.txt

Policy: https://www.afas.nl/portal-bedrijfspagina/responsible-disclosure

Hiring: https://www.werkenbijafas.nl/

-----BEGIN PGP SIGNATURE-----



wsFcBAEBCAAGBQJkBvHNAAoJEGwNkh0DmtUzoyMP/2vgGXv6wbYnjD1YVe+N

Jqyuzi4CQvJu/17OlcTO6BZ1FIYZ47lPWxBcykTBw6zMUhu06Qb31FyBBnEU

+VqRutkJ4wkxCKAMoWcOUH9uGrEU2dkngM3WzLAGGwL5l5T27tHBrUCQzsPx

aG+iq868/Ew3uXZ/EbDCNzCDfWmNAFqLDjZgtU3U+N4eXKAlBCRzVtIqw4Br

YJ+K4qT4zb0+Z5AfOQ5Mt1RZauzjXAPJSfnXbqC6ZRmrjEUHAMfSyEEkk+Kg

xNpx8TPJ/ZEM6/eeCI7rXpqbiJtiGCkrjjIsvnl460pvnzd8XGrzSCalyJ3n

dF38nSgbRREtPA54CGWrraqXnGFJswDqkXVB/9Neh5xDqRKH/bKnejDyXXVH

XBCW1/NekjU9K0Mobxevmy1v14nrxRLuoGSoSB5L8axYrJvnV8wwdkSVsu4z

qWW45LqLOAGxWThqxEACf3kIoffSeKD6JTyEvts1G6KBHhh/qVBO24HeSob2

XhXLa5lCMmFdEy/in34LyeCCFUVHsWLTxjyvWzwLjzYkPU8SyhLhT7B8smCY

29qChlKsslFoCCP+AvR1D6+mGCeJcyNEs8CnU3xhrteh4rDZ3q2hr3Guzu1+

U6f2GRkegDhrbhqBVvPDpTQ6rrxZuAEo87CoyU4pNaFJAYEOLXsLzlCcmQBa

Gohf

=CR7k

-----END PGP SIGNATURE-----