A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



Contact: mailto:responsibledisclosure@apeldoorn.nl

Expires: 2024-07-11T00:00:00.000Z

Canonical: https://www.apeldoorn.nl/.well-known/security.txt

Preferred-Languages: nl, en

Policy: https://www.apeldoorn.nl/home/contact/digitale-klokkenluidersregeling-responsible-disclosure



# We do *not* use OpenPGP, so do *not* use the key that was used to sign this

# security.txt file for sending us messages.

Encryption: https://www.apeldoorn.nl/.well-known/gpg.asc





-----BEGIN PGP SIGNATURE-----



iJkEABYKAEEWIQTHg5ufzsFJ4Q0oxNqUAPu8OsGDzQUCZK62DCMccmVzcG9uc2li

bGVkaXNjbG9zdXJlQGFwZWxkb29ybi5ubAAKCRCUAPu8OsGDzUW6AP9HnMR1o0Db

hTRhaN6+WPc784CBcMdb3nvy4k53nCMkzQD/WAJ2LMBTAyjx7VOeVdTuwhDLuPm6

yG3yUwIkLWx/lQM=

=MMgz

-----END PGP SIGNATURE-----