A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Our Security address
Contact: mailto:it-cert@fontys.nl
 
# Our Responsible disclosure
Contact: https://www.fontys.nl/Over-Fontys/Wie-we-zijn/Onze-organisatie-1/Responsible-disclosure-Fontys-Hogeschool.htm

Expires: 2026-01-08T21:15:34z

Canonical: https://www.fontys.nl/.well-known/security.txt
Encryption: https://www.fontys.nl/.well-known/PublicPGPKey.txt

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=iRPb
-----END PGP SIGNATURE-----