A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



# Our security addresses.

Contact: mailto:securityofficer@xelion.com

Contact: mailto:beveiligingsincidenten@xelion.com



# Our PGP key

Encryption: https://xelion.com/.well-known/xelion-pgp-key.asc



# Call us if needed.

Contact: tel:+31152511411 (Available 09:00–17:00 CET)

Contact: tel:+31157630771 (Emergency)



# Languages.

Preferred-Languages: nl, en, de



# Canonical URLs.

Canonical: https://www.xelion.com/.well-known/security.txt



# Privacy statement.

Policy: https://www.xelion.com/en/privacy-statement



# We are hiring.

Hiring: https://www.xelion.com/en/about-us/jobs



# Expires.

Expires: 2026-01-30T23:00:00.000Z

-----BEGIN PGP SIGNATURE-----



iQIzBAEBCAAdFiEEUogvAmBLVpkx80A6NlY1hdG4rjcFAmeA5JsACgkQNlY1hdG4

rjePmBAAuzeHvipXC0jTojZ6FmXCE3GkIy/UZ2HGfkib2dcRFZ0aQAYmzL3gJs1O

pQJ/Pz+EHvtUi64RvUa9dD+djYr/dPyveHfpQNvFvVhNd+J1BsJFytffrTHHvNO4

jvEfCcu6YiMgzLdzaoB2cYW6T9taaDbPS/v8pJUECRAqdRpOxPfyVs+nkE7fFtjE

6tTGr0ouwr4ofZNw/MAFoAm+jOC0LcPx0TdxzPDaWIwwJYMGvqxAatvW3wNk/IQl

zVsp6znHV5L+aIzjnhGQggcPt9dNVPefzvHp12CcbCOqlYn5idj7y5xE6YkYVKtg

1s3JK/MdTQ6cLIlQ5iW4mhZ/Z9+dZf2DePh+s/84+v26RI7art4x9YB44KNgTu0t

NbWrzmMa0WYxqxC96S9SZNinMRRZBjjDHf/vDDKPRraLI84tF+vXaYOvTloe5GHe

gVK5OH3bsmj+F5rzg5DcqgBkqnJUNDKDf8ygdSEZ2ra7dvv3weA3mRyzCOEXVBW9

77QnFT7ZVcAwLEhwf37N18bDHWLjBJS5kve3TYeF7l+UY+3RdCMrYPwf5y/NMzTt

ucb+RdHm5gFEsNCvKGE/TjdPdn2NZqdm6SqIPHoZ/Ys/inVcCQ4CcdiXVDCwOlH8

eY4tSfP+ZK8A1omOm/IB5ROlH320l9jn/ZpOCIKJNNfsmmiWGxM=

=daKG

-----END PGP SIGNATURE-----