A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: https://blog.ovalerio.net/about
Contact: https://hawkpost.co/box/96a8f46a-7896-42a4-9657-376023bdd6d8
Encryption: https://keybase.io/dethos/pgp_keys.asc?fingerprint=ae78f2935d879715ec3e157fdf557f2bdcc2445e
Preferred-Languages: en, pt
Canonical: https://ovalerio.net/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=4RLU
-----END PGP SIGNATURE-----