A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Canonical URL
Canonical: https://daxisweb.org/.well-known/security.txt

# Our security address
Contact: https://daxis-ict.nl/meld-kwetsbaarheid/
Contact: https://daxis-ict.nl/report-vulnerability/

# Our security policy
Policy: https://daxis-ict.nl/meld-kwetsbaarheid/#policy
Policy: https://daxis-ict.nl/report-vulnerability/#policy

# Hall of fame
Acknowledgments: https://daxis-ict.nl/hall-of-fame/

# These are the languages we speak
Preferred-Languages: nl,en

# Our OpenPGP key
Encryption: https://daxis-ict.nl/meld-kwetsbaarheid/
Encryption: https://daxis-ict.nl/report-vulnerability/
Encryption: openpgp4fpr:811100944C94E98784B291AC6C447AC1825F7655

# You shouldn't trust this file, once it has expired (like bad milk)
Expires: 2025-12-01T06:41:22Z

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEgREAlEyU6YeEspGsbER6wYJfdlUFAmi1MgIACgkQbER6wYJf
dlUuOQ/+P8cGN+juSpxFEYdT6ntawHhllSFqKJR72cyekcpEPCagjtas9rKEaDzK
mDPQPH3Mu52UfKGBd04M1PolfstZ1JyJZKhy1P5uOaeXznbIAIXZRQkXsoGvXEr8
MnXKyvGhvCBjausjO1O7zrEHFAUw8rjJ45up84C9MAIx5FY5VBx2cN0iZ/aN/0N/
NMdDp9MkrU6BuTLY5QVVsHlB7jUJNsppVzBGVi8wj5dnvZXJMSQXCuJ1QE3Q/y2o
8Dzfu/lXFAvDvrP8egkxyhQGwRp11CxmnWLW72oMBtZ5PGD62Mnvc3DAOjTwm+MF
vrPtgxOY+6MqSW6UjRDOIiiGGuPVeaolW4CN2jvS6lsUNs+kOSvGR4CmMSnlnzt3
Ip0UNUDYSe5pmVD4b0NMm86rx/b8ZfducNm+U2tNEX0Z+u2t210X8My4I1XIQ62D
lGYC/6zv3LlFZasNkF5AHDdglnKo4Hg6cCpUIq3wBv00gyXbo41yhibfNfN6xrYs
Y1WQS4/ZHjC+yc4JdBZy7SQtUpCHZNbLuqkMgoVXWwG1FieWrvtxh2FxG9aPEsiJ
Bim9P/9EB9FKvkL9ejAHKXQkX/mRGnZ9+ZgP5ewXcJf+NjIaJmiBJoRb1pJKoXG6
WWcs81ZMZ1YEpBIfG957R8Fba3Cv6PfUwY6D+wQWVlpTrLDoeD8=
=wAqe
-----END PGP SIGNATURE-----