A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# Canonical URL
Canonical: https://www.ceyusa.com/.well-known/security.txt

# Our security address
Contact: mailto:security@ceyusa.com

# Our OpenGPG key
Encription: https://www.ceyusa.com/pgp_key.asc
-----BEGIN PGP SIGNATURE-----

iQHIBAEBCgAyFiEE5iLPz+4BGCEmDz6E1y+3FPeaYZUFAlzf7DsUHHNlY3VyaXR5
QGNleXVzYS5jb20ACgkQ1y+3FPeaYZVTZwv/ZBvey0GEklZ07jgF9/CHljYhV4d+
Tef9Cg9J9KKcnFU9E2zocar9fkkf6DzdNhnx31M/WHxhQ9W/JbKR7d/0EUIY7mJ7
0/UbHuJYZjdYa4wfV2DUSj85XZ8pyeSw5onhUt+4F3SfTo9xuW4KvwBu9jC+lm/3
Dz2LfWQ6xng5sfwl2CBrMq32quA9cP38PklAHqnm2K2trHS2cNROIG4dH+BwPQ+0
IU4XadiWEef+Jp8xtJtYVaGXfN9HwxU6O2gNbmgH3RwWH+SCS2Wms1ABdIcpIaQx
bssEYAKNsXOcN7JSx8gN2VbsW8sAnPvuJ3NeeyJDUoHVnnxi0qiSKJKi+c2CYCAS
TjYjH8ntQ9mdOCEqxkKwiV0aGpWj2gD0qXeZ4UoAuONqfnv5jGXsRxqcqTiUe4yC
SQCsazuewvuDG5Q74Ej8eDgD23sBrtgJzfXW1J6bK8OhHa2hOYZCJgeTVJAJg67H
wTBwwW65oiMtUEAJci4xoDjhH+q7K73bWpBW
=6JoP
-----END PGP SIGNATURE-----