A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# This is general contact information for any security issues on the website
# or any software distributed. Some projects may have more details on
# reporting security vulnerabilities.

Contact: mailto:arthur@arthurdejong.org
Contact: https://arthurdejong.org/contact
Encryption: https://arthurdejong.org/arthur.asc
Preferred-Languages: en, nl

Canonical: https://arthurdejong.org/.well-known/security.txt
Expires: 2025-12-31T23:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=tu66
-----END PGP SIGNATURE-----