A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:eelcom@mastodon.nl
Preferred-Languages: en,nl
Canonical: https://mastodon.nl/.well-known/security.txt
Expires: 2025-07-01T00:00:00z
Encryption: openpgp4fpr:BF02BF90720DF81892C34DADB69E171AFE258956

-----BEGIN PGP SIGNATURE-----
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=ukEa
-----END PGP SIGNATURE-----