A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://isaeus.com/.well-known/security.txt
Contact: mailto:security@isaeus.nl
Preferred-Languages: en,nl
Encryption: https://isaeus.nl/pgp-key.txt
Expires: 2025-08-01T23:40:52Z

-----BEGIN PGP SIGNATURE-----

iQGzBAEBCgAdFiEEJKZYhMDk9HcLcYvO3hipuwbh0DEFAmasHQQACgkQ3hipuwbh
0DHHgQv9GqC01eR5lf/ugNh7NaiRmyP2bTJg8FvNwN3ZRGdwacRyAUW5qOqyzjCD
utng8qzPkRHVUa4nszPNchksu/OY78JqNHnH32LfYWu+hX+hMGjafniI3X7OuZL/
kPn5bh4xRKRu8Ih/7jyvaewUH2/k12zRkCsaJbLb6ekwMEzKU2jpT6y+ViUnSME6
euVM9+dQiBAxOzVNSX1lZnsFqGkLrfu6FvnQfgVC71rnBwfB8b1X3lIhIkOodfCw
xAadZG2EUav2FZgSQCU5d8xCFB0/REpQ/bL6iygEeO5E0pRCYt/8Z1oaVr+hk33L
Fz9H/dW5H0Xx728Er5WoW+v1bpa0SiDeVW74lmybGZbBiWVVDKRxKOb8UtmdhttI
3ZloB8YvGhSKmegijjNZ3BRpOxVoRK2CXbw5oOQ0MqVddu5/S+zGOYGUeb90idI5
x/ovP358UHgl/5YJMN2UW5MW1IWwqBbq4B6q+EAxOTgTRW0m8s/P8eAw5Hh9wjZ5
/BFZhlc8
=PAJ9
-----END PGP SIGNATURE-----