A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:development@dutchis.net
Expires: 2025-03-13T00:00:00.000Z
Encryption: https://dutchis.net/pgp-key.txt
Preferred-Languages: en, nl
Canonical: https://dutchis.net/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=dv72
-----END PGP SIGNATURE-----