A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:info@jannesmannes.nl
Expires: 2025-12-01T07:02:20+00:00
Encryption: https://jannesmannes.nl/pgp-key.txt
Preferred-Languages: en, nl
Canonical: https://wonderfeel.nl/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=u2sz
-----END PGP SIGNATURE-----