A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Our Security address

Contact: mailto:it-cert@fontys.nl

# Our Responsible disclosure

Contact: https://fontys.edu/Responsible-disclosure.htm

Expires: 2024-08-20T22:21:20z

Canonical: https://www.fontys.nl/.well-known/security.txt
Encryption: https://www.fontys.nl/.well-known/PublicPGPKey.txt

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=anph
-----END PGP SIGNATURE-----