A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://isaweb.nl/.well-known/security.txt
Contact: mailto:security@isaeus.nl
Preferred-Languages: en,nl
Encryption: https://isaeus.nl/pgp-key.txt
Expires: 2025-05-01T01:35:33Z

-----BEGIN PGP SIGNATURE-----
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=YaKG
-----END PGP SIGNATURE-----