A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@volkerwessels.com
Expires: 2024-12-31T23:59:00.000Z
Acknowledgments: https://www.volkerwessels.com/nl/responsible_disclosure/hall_of_fame
Encryption: https://hacom.nl/.well-known/security.txt.gpg
Preferred-Languages: en, nl
Canonical: https://hacom.nl/.well-known/security.txt
Policy: https://www.volkerwessels.com/nl/responsible_disclosure
-----BEGIN PGP SIGNATURE-----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=Sz32
-----END PGP SIGNATURE-----