A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Canonical URL
Canonical: https://daxis-ict.com/.well-known/security.txt

# Our security address
Contact: https://daxis-ict.nl/meld-kwetsbaarheid/
Contact: https://daxis-ict.nl/report-vulnerability/

# Our security policy
Policy: https://daxis-ict.nl/meld-kwetsbaarheid/#policy
Policy: https://daxis-ict.nl/report-vulnerability/#policy

# Hall of fame
Acknowledgments: https://daxis-ict.nl/hall-of-fame/

# These are the languages we speak
Preferred-Languages: nl,en

# Our OpenPGP key
Encryption: https://daxis-ict.nl/meld-kwetsbaarheid/
Encryption: https://daxis-ict.nl/report-vulnerability/
Encryption: openpgp4fpr:811100944C94E98784B291AC6C447AC1825F7655

# You shouldn't trust this file, once it has expired (like bad milk)
Expires: 2025-09-02T05:20:40Z

-----BEGIN PGP SIGNATURE-----
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=8r3R
-----END PGP SIGNATURE-----