A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://cousteau.nl/.well-known/security.txt
Contact: mailto:security@isaeus.nl
Preferred-Languages: en,nl
Encryption: https://isaeus.nl/pgp-key.txt
Expires: 2025-07-01T05:23:50Z

-----BEGIN PGP SIGNATURE-----
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=kuD6
-----END PGP SIGNATURE-----