A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@ibio.nl
Expires: 2025-01-01T00:00:00.000Z
Encryption: https://www.ibio.nl/publickey.txt
Preferred-Languages: nl, en
Canonical: https://ibio.nl/.well-known/security.txt
Canonical: https://www.ibio.nl/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

wsFzBAEBCAAnBYJlhajnCZCiU61nUqzjWRYhBDX+wKPOEULuXghsB6JTrWdS
rONZAADd0BAAqplNamZZ5oQ73s+NybOg6Wr1ztLW67Dmfyxt9x1+Y80yMvyg
xwjzzfX757sS+fCGCCOA7kBedZ8FkWN7mkiqr1YvHDi2vVQZ0MBrMmHP8QaZ
jLKCq3xALC0l2INXvg/+TNYpftQTKRzW2oK2+7uu5/gYAPBBjDUVs0b7aqwg
X3E67stbVUoFypQeU1yw3kMivLm0S+6mPreqDcSoZq+P9Br+VevHCNREefou
ebPbLPQxKBez5vSCztja72L3nEvonlbbGkmLVga6xVNeT24FRc+d28haEfmC
aGF/PSLrIoVEkON0Cb3LkfH2Eb3xl8ebUkVSyxYWbHaFT+G7Gf5xRUwOyfwf
xtn3R6BmBFRHCKzqqd5YrtNEZSOfE1rJcn0gXp+5rBrtPGEgsURrIryL955o
UOAjh4yKIUdlgc5YJs5SFBX9ICVB8mvsxIEFjry+XhLqACGW+DDEZqVRdSEM
ijZ8tzXsbaX1jxvXaQJXoadnRuHSz1aSWfCjnIkyjQit4XIkYX5vzKhi5iNw
o0Lb1zQrA/z2qbzM6Y8YHApj/WvMVimJSRiS4hABN5NDye7q3TVe2kdlQ+7f
vwG2+QjFjMsKQ7D8zzB9Dii9ohAUAjHy5KIFrYx3gerhzGc8m/Ucf2TlZFS4
fabqtuxhgD7jyFyVG+k0zFZln1h9hUMCdVU=
=7r4K
-----END PGP SIGNATURE-----