A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:roland@rolandvanipenburg.com
Contact: mailto:ipenburg@xs4all.nl
Contact: tel:+31652346633
Encryption: openpgp4fpr:EF8C8DAF857874E9
Expires: 2026-03-26T00:00:00.000Z
Canonical: https://rolandvanipenburg.com/.well-known/security.txt
Preferred-Languages: en,nl,de,ar,fa,zh
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEEpwqtnU18KIcnPBHi74yNr4V4dOkFAmfkXksACgkQ74yNr4V4
dOnyUQgAmyi60HLR9Yi0XM7PQbGVz7MfLuFhW+GPXezOkeNKOnpqsW7EOjIaysFd
JgfwAWFRIowwTWIl3Z+J8jFQdRYsrf73aoCUcTkB/jtNEvF50vwN1YnP3l+vmTJU
+n8w62W9pdsYAWOAVIODI8Gswy85aPdH5FKgmWUPBgr8lOKLQxrjlRQj0MPwM7Kp
bWe/AMKwcKmAE8l18/T9ZkWKgPlAaQ1Mp+NGHztYyx3+lIwczqnG2ogUSqMD8m0x
SZp4uwy5pN70TLmStPd1TgWvtz5x8Nce5gfKA5zp+WtDOXvK1r04hJfaJHinzmZP
cN/1fkWafvhCswhHKvoHjVqxPj3saw==
=9Jkz
-----END PGP SIGNATURE-----