A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:info@intention.nl
Expires: 2024-12-31T23:00:00.000Z
Preferred-Languages: en, nl
Canonical: https://www.intention.nl/.well-known/security.txt
Encryption: https://www.intention.nl/gpg.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAABAgAGBQJlHmY1AAoJEAkJ3FVG1gdDngAH/0t4/hGh00tV3hjvFZvvEldm
ak3lxlOX3wU1WBdGwVwMV77+I3kOZcIo2q7jdpSy1Bmr0O8BQGGRtyYqXkttcI+5
+vsWKANOwnKRGN+HFZiBwf0X/CKcsJZdpF2GrDOiOUjrz/0oiqaovj5JO76YtE3i
6bB2yA97T1/IX3x2TLRo5q1R/CoIAcXHOhgvALpTFHPpFN4qrt/H+iGdeopGaJID
jkCrLpHM+NM1gVM3wmoeYI5ZsEjkFnvohZhENN7GKtkNFmpYiS5FNB+rNmsSsxfb
/Z1SIopjuGC7rQ4z6HErupAR3D8ENJYX7QmceSW4+j5ishD/LLs+MIF/oQrakak=
=Ow7s
-----END PGP SIGNATURE-----