A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@nkhn.nl
Expires: 2023-12-31T22:59:00.000Z
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/F0C956D795BE6A95D5042921153B67596A3006F8
Acknowledgments: https://nkhn.nl/hall-of-fame.html
Preferred-Languages: en, nl
Canonical: https://nkhn.nl/security.txt
Policy: https://nkhn.nl/security/rdp.txt
-----BEGIN PGP SIGNATURE-----
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=yEyB
-----END PGP SIGNATURE-----