A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: security@0xdeadbeef.network
Contact: wssh@0xdeadbeef.network
Encryption: https://0xdeadbeef.network/pgp.asc
Preferred-Languages: English
Canonical: https://0xdeadbeef.network/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=5nMu
-----END PGP SIGNATURE-----