A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: security@fasthosts.com
Encryption: https://www.fasthosts.co.uk/.well-known/security_pgp_key.txt
Preferred-Languages: en
Canonical: https://www.fasthosts.co.uk/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEPJbrw6N6L9DlY+Qh/EFaT12mG4kFAl4ld9MACgkQ/EFaT12m
G4kJRggAowIafcwrxtePjDcTuHHhjjjVzRJMD9p90LpAR4ElXQFl/zhHFZ/DONRP
lVwJZA2pe8cm78tqW4FagKhfRVEzSJXzRWiKgOhs/5RTTBeaOH134E0TCq4Nsg6V
jnaitqH+LPIlHiZ1rFWRgggGJ0pY8jDVCTPk/5IU9qeKetAP3PI2SqqWXuxuWiHK
AsApXrxfmX+KvztWLrk2JlA9VbQueVOTKsDMkHDCLQGEZ1i6/aH4cqAgBOMPcMPR
sbTs+c6b340VwrZ54n4dCx6hA9SahN1MBWU8GuRw6ICKtNOIxgjDiJk5CGsfCqca
3haDnai8d8Z1FmWx1Vsq8retw8nBQQ==
=LjBF
-----END PGP SIGNATURE-----