A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:security@lvnacapital.com
Encryption: https://lvnacapital.com/publickey.txt
Acknowledgments: https://lvnacapital.com/vrp#hall-of-fame
Preferred-Languages: en
Canonical: https://lvnacapital.com/.well-known/security.txt
Policy: https://lvnacapital.com/vrp
Hiring: https://lvnacapital.com/about/jobs
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEWXqjrQgj4h0tAnjVrMxe8gAphx8FAl3byRMACgkQrMxe8gAp
hx8yNBAAvmNI3irlD36/EQkPW57oycFIBQNa+11y9qSBaYGoej74dNQ+6ey889hB
HxFPS8dwp1m8nDLvOR+lW+zJSBlyomei4zDYEqNCv+BlFrdggip1Voi4wql15Zkp
xXel8adWbhJ9CoOC2bn+L1LG397T+dFjDYFBf36TnfHf3G1vFoDYwoaTlULmTAuS
d64lP9Ux7yZkp9VvcjeoFIioBWHSajSb0TeQXJz9DFJfm+FoAxLmurIhVJH6aQ6H
J4q4ScsVOAg+i0S+SSKHO8ILQ1m429oNBFG6ghobmfb7717Ka2W5NtHrOPnk7OzM
1Hf9sTG0N9hwYQ7e6nt0lsudWyU2OaBi/D9gAGK6bSxQXBRlyT6osTbmB5PdmYyp
Jq8SnMRDbQK3ntX+Qa1LMeIxYtI4WZauZ2RFSyDeFIAKnfVkSat3plJnMEVvKHzO
YtNleb/Q4Sy5q11mukQxBxQ+zVxnU9k6SgukhoJSN+5yo6O7qI9V5+2ynLYKmNZa
Y4AamqoGPmy+aC85amwmMB1YE9PTriisxl4Se+1E9v2Svp5SUabL8kUiAIVPnHox
ahGF7OjFO9EDj5l2y5V15KEoKwmQ7xrr3zWTyntZqLRUyyBIgE11uwPrT6rozc8u
XHTo7hdgzaATwXWzab4IMQ/gS7lb4x3rvyI9kn3cHQQXxdBshuk=
=0K+4
-----END PGP SIGNATURE-----