A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://networkoperations.nl/.well-known/security.txt
Canonical: https://www.networkoperations.nl/.well-known/security.txt
Contact: mailto:noc@networkoperations.nl
Expires: 2026-03-05T15:40:27Z
Encryption: https://networkoperations.nl/.well-known/networkoperations.nl.asc
-----BEGIN PGP SIGNATURE-----

iI8EARYKADcWIQTLtRoQk7vTsCWnpcejdHTaoQnmwgUCZ8hwbhkcbm9jQG5ldHdv
cmtvcGVyYXRpb25zLm5sAAoJEKN0dNqhCebCJYMBALFl7JwrQFEIwV2sK7NMKGOj
MSFP7iA8FL8kUlnVpbpmAP9WulCr7WjEghWEHAdaPdYETB5rFZOySuwG4URnC/Oc
Dg==
=7zOg
-----END PGP SIGNATURE-----