A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Canonical: https://venev.name/.well-known/security.txt
Contact: mailto:hristo@venev.name
Encryption: openpgp4fpr:8f90acd84a09bea57b2a8208b3f0f129ab1e3cc0
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEb/2s7vGPWBH9BOGpSkmD6rj9B8sFAmWD+wkACgkQSkmD6rj9
B8sHaRAAilpR30Ex264szydY+ACXD4PYad6zN5EHtTvXm3g5BvZfuoN5T1VaEi9F
tT8PMa5UsODHLdVqEdAW6XAIqUjWEEmRFFJT74xN8zSmb4WUVtp8SW/FaHV/ZeKR
1Kp/y2tF93fZW33eo+dW+dvkEX80X8Px/cG+z18tF/dDiMuzYk6NDB4d5+KE24zg
aJW21RCeUxqq0Fcq+7vhHdFXxOc4wJIpU7EpVTwvnDwdE/F4iOmce45Z8OxO0aMp
X04eu0okEEYyKIxXKabteSFbBzDWUZKe+2Mfm7avf2m5DOhymur0PjO1qPqU3BNx
JQ+rwXLVmwn86+5hHVbp5f4rfD7ynK1o+ia9HSAFGbXrCG4Aat/6zfscpF7CrkQx
nDzs3oLvLged2RMq2uakceAH8OPSzE+2l5KeEFXkalUofigSMUF3zZYcKVjGY3US
pFL8q1XAUOodO51e208qkjhk1CSb5RbZsY2vQTb4pM8SYjuDdZN1kREwjM6IHHrl
Y3kAKvnhlh3TYwHV/khLutYD6nIc5akLBOOkkgKYA9zB9deoa2mtHpLUK6e+hhDU
ZEY+ZjgjqDKvkZWAmOq/hNLpxnV3BCIv5/8WRb6tm4dJ75V2l6Dkr9yA8Kxcddy0
+u6kjTfQZ9S0fQabier3e7XuSuiyU7lwuFm3nBAwzXQQN1D7QNA=
=3eeg
-----END PGP SIGNATURE-----