A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Contact: mailto:security@grdebevelanden.nl
Encryption: https://www.grdebevelanden.nl/pgp
Expires: 2024-05-31T12:00:00+02:00
Policy: https://www.grdebevelanden.nl/cvd
Acknowledgments: https://www.informatiebeveiligingsdienst.nl/responsible-disclosure/
Preferred-Languages: nl, en
Canonical: https://www.goes.nl/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)



iQEcBAABAgAGBQJlJpaFAAoJEC97ErMfsBQkNukH/RrY5YLRz0ILJGdzm6j1zSka

0WYiNENeRfFnJI765xoYdL7QbL/qJags7o3OI5l/6HozDxEECjQGQaNcJl12u5qw

Z+bzHy02ZMaPxmDL+DDe7q0DTdHuroH4RyyIqykhPOPzuyVzb2TIn+GYfWS5M62s

h8UrzfrGWOpO4nYWtXWp1U7USpakhYcBFdg5eVi7i/ysWz4kHN5Tmeykqiuz+pxz

LpyyPDPDDqGeL25G1snXIQeswOf/R09xcwil7FJHTFjzY0mr7X/mLUasTGxQaYlR

Vf0OM2RqsLgJotiUrpCT0DcsZ1n4DsnXQ3EdpL98qXbSLiHfzVCEs048Lw05gOY=

=WjsT
-----END PGP SIGNATURE-----