A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# If you'd like to encrypt your message, please do so within the the body of the message.
Contact: mailto:responsible.disclosure@lvnl.nl
Expires: 2026-06-22T12:00:00.000Z
Encryption: https://www.lvnl.nl/gpg-pubkey-C2C1477A.txt
Preferred-Languages: en, nl
Canonical: https://www.lvnl.nl/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQGzBAEBCAAdFiEE/lm+jfbCbugc/pZBjS8Og8LBR3oFAmSVkJAACgkQjS8Og8LB
R3re/AwAxzxI0Eft0VRbO1N4JTzxfADTuwEv+xApWYGjlRdcybcCp/6IqEqzQ/ru
S/wzITtFxKKXj4gE2KUQHEquVrZZOXz1S0iRzSS95olhQy8BCs/QbHsgXvYpFSyI
fRzHkyE6b2PMEwUr46WFCIpb6tSCPw6UmvrFeW+wUTomw/3YxB9DcZXwCKZ+JrBp
Qhdktn2QUr0t9X/xNVTmVGPuK6MWa7zyVMMARbtHvbUPuSa6/pV1rrPMTRg7kRhh
X67HP1t/wd8w0M25eM8QtyiTAXSEOzvVj2RQp0wfc+r6zh1/bdHDZ0l+K7HHSTjp
s+CeyjjrBANDCysu3FkXBvA6BtFR7cD/XlmbtBF6NBOcHXpF/NBbnl1PHMVnHvSF
Zu+cQ+zjp7s1ngeV7aq/1iXaTMpCP51/AjKLehSemUOUwSUIy/phiXA2fqqdz9c4
H6a9fZPp9lEadxLwyeEEiWAfWl/8Py1Elq1av0xP6rb/Yed6QN7rnPKXNjEvCo5M
QppmLe04
=isPO
-----END PGP SIGNATURE-----