A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@qiryx.de
Expires: 2025-01-29T12:14:35+01:00
Encryption: https://qiryx.de/.well-known/pgp-key.txt
Canonical: https://qiryx.de/.well-known/security.txt
Preferred-Languages: nl,en

-----BEGIN PGP SIGNATURE-----

iLMEAQEIAB0WIQRkiRNWvFqwRGVZWGKIhdM7nNyxLwUCZbeIqAAKCRCIhdM7nNyx
LygZA/99p6nOST7Ppns5CbDY7qkpvL54sK7gi2z2muIPirPaXw8EAFetA90ei7fq
g7S5V+hL2Fy8Er7nRXnKMOQ+rH6iRCj88EUlhJ5Tc7V3JE+A+ZPvdGp4ZWMHppdd
SPuIG5wkE4gaNJE35wZqu0kO/7AqIN2dKIBtUvr4kI29uqoSOQ==
=bISX
-----END PGP SIGNATURE-----