A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:marcel_security@marsnix.nl
Expires: 2038-05-01T10:00:00.000Z
Encryption: https://marsnix.nl/marcel_security.gpg.asc
Preferred-Languages: en, nl
Canonical: https://marsnix.nl/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=hlmM
-----END PGP SIGNATURE-----