A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Contact: mailto:security@planonsoftware.com
Contact: mailto:811@planonsoftware.com
Contact: tel:+31-24-641-3135 
Expires: 2024-10-25T12:46:11z
Preferred-Languages: en
Canonical: https://www.planonsoftware.com/.well-known/security.txt
Encryption: https://www.planonsoftware.com/.well-known/PublicPGPKey.txt

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=xGFH
-----END PGP SIGNATURE-----