A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Our Security address
Contact: mailto:it-cert@fontys.nl
 
# Our Responsible disclosure
Contact: https://www.fontys.nl/Over-Fontys/Wie-we-zijn/Onze-organisatie-1/Responsible-disclosure-Fontys-Hogeschool.htm

Expires: 2025-01-15T10:22:10z

Canonical: https://www.fontys.nl/.well-known/security.txt
Encryption: https://www.fontys.nl/.well-known/PublicPGPKey.txt

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQIcBAEBAgAGBQJmlPisAAoJEK/9cSgqgSr9b6QP+gLEPjqNq0MDmEb6fJklRrtv
QB0+ubhx5IXDZAPFZoEo5MRteZdPV/lDMyWf5mEihig4iMX/j5W49eQq/ZmbO4aK
L0nm3R0knA7Bl0SYSBYYo9Nqc/PMzay3BBEdU+M6u5gCy5T2XW/HCtCcLRHTCymJ
LQAUAFmG7Y1PwdS3KZi10BS9iVqhJmUAeLDClzBP5/Lax1M6OKsPWT3++Sta/O17
ALKpzkdGfrw2ZKfjzlgFULtYaXm0mr4q9lcykbHMOHV1IauqrT7jxFdCAC31Nmoo
TKHHAyK+7IrOezZggIeMff58cjYlutBRS0HrsTsm1VONR/vz21YXNSzoB/2KNhGs
zNfpp7aH2VW2f4kS52aUO2I3Pwh4qIewA6I/wxz3FK6NnUXwWIpFh7374B8XyZ7s
nLl8gnNBoBZoHacsYJxgqbBISFTSOxw+XRsrKUsTyi4qeKZLYL3aNWqQTvCKEDzM
3cM89TE80jz4K1ZgRJAD0AU0V3KcVAvNSO6qawbKA5dJU2rScMw6ZXXpAp7fpP12
tuoPqViXMoAozJ5yR0FmrlmBTvzwOl82nzxc2HIfIs8SlHj761y+mXJ0+98Rp6AE
0CI+Q/ngLzXhcS+pwDVNSNhyQ+mNlXHsNhfswDTA4Rq57kzTZRgB/yzTs5/eChuv
liEOIWPpj0Qry3WR/t18
=gT3A
-----END PGP SIGNATURE-----