A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:binota+security@i-tm.com.tw
Encryption: https://i-tm.com.tw/.well-known/gpg-key.txt
Preferred-Languages: en, zh-hant, zh-hans
Canonical: https://i-tm.com.tw/.well-known/security.txt

-----BEGIN PGP SIGNATURE-----
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=xm9n
-----END PGP SIGNATURE-----