A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Canonical URL
Canonical: https://daxis-ict.nl/.well-known/security.txt

# Our security address
Contact: https://daxis-ict.nl/meld-kwetsbaarheid/
Contact: https://daxis-ict.nl/report-vulnerability/

# Our security policy
Policy: https://daxis-ict.nl/meld-kwetsbaarheid/#policy
Policy: https://daxis-ict.nl/report-vulnerability/#policy

# Hall of fame
Acknowledgments: https://daxis-ict.nl/hall-of-fame/

# These are the languages we speak
Preferred-Languages: nl,en

# Our OpenPGP key
Encryption: https://daxis-ict.nl/meld-kwetsbaarheid/
Encryption: https://daxis-ict.nl/report-vulnerability/
Encryption: openpgp4fpr:811100944C94E98784B291AC6C447AC1825F7655

# You shouldn't trust this file, once it has expired (like bad milk)
Expires: 2025-08-02T00:57:24Z

-----BEGIN PGP SIGNATURE-----
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=IVsQ
-----END PGP SIGNATURE-----