A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:devops.web[at]rtbf[.]be
Contact: mailto:csirt[at]rtbf[.]be
Expires: 2027-06-04T11:37:00.000Z
Encryption: https://openpgpkey.rtbf.be/.well-known/openpgpkey/rtbf.be/hu/ahrnamnoi5m8jmw373g6cdiau7e3nf9w?l=csirt
Policy: https://security.rtbf.be/cvdp.txt
Hiring: https://emploi.rtbf.be/index.aspx
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEaVbLBoGDSGE5SrWy9IjPDkNUGmcFAmhb/8AACgkQ9IjPDkNU
GmdGzQ/7Ba93I/23SNpfOc4h7fqrp9H6aaRroigmJlAypT34R/ic+pW47dTXy6rX
GbefbT8S5GnD5kELh59klOV1n3YX9WWQHFrYt0uIy4VLF7mvctzj+XFQjN333hI6
BxVSjsi1hKwqDpZwNFMcCm7KbcdBotdW5/tyaMo+iI59crAzaDb4TgaTlG17+htP
34yq9ang68OlYjGhRXA3BHgx2SkEbBcYTpubZSqN5LeijQ2a+c5RBclxY30PIjT6
qv548oEybG9rnzi99GR1HFfUcz3pQL+i67Mis8r05MJSEzHP2BvlTPW09H1kffoK
OvRVFZrM/THEq0oQNZy1zhIYdCRsiEcNUJSj1zUk3W5Xr1oxOtNezycYFi8NC16i
/x1PYT+ggB2wxRRJvl7RVyx6cHhfnI+VvTGVUPUt4q81Wtq809wVmyxqSuN863ap
/GrdaiNek8aYQOKS0RdPdIm6Ht3ci7ZeLGZpcNFOsHg8x3uUBjI3mokBUT1G3V9d
blxRKP5KO0Cf0x7stTCWn80eWWHjlY83yqoeP2pRY0AzFStY+yKhO2bTrwqtcAai
+609QcuIeEMk9NJ7w9kqVJddMMh56LAK4ZfSASfKsSCFI0pr4cR8AXZEm2R4J6w7
2B7N6WspfDQFgh0dcbGEN6pi9f12yMiEGNOHxPkOPhenmaeibhU=
=GgXv
-----END PGP SIGNATURE-----