A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Monzo Security Bug Bounty
Contact: https://app.intigriti.com/company/programs/monzobank/monzopublicbugbountyprogram/detail

# Monzo Security Bug Bounty Guidelines
Policy: https://app.intigriti.com/company/programs/monzobank/monzopublicbugbountyprogram/detail

# Researcher Acknowledgements
Acknowledgments: https://app.intigriti.com/company/programs/monzobank/monzopublicbugbountyprogram/leaderboard

# Monzo Security Contact Address
Contact: mailto:security@monzo.com

# Preferred Languages at Monzo
Preferred-Languages: en

# Monzo PGP Public Key
Encryption: https://monzo.com/.well-known/monzo-publickey.asc

# Monzo Age Public Keys
Encryption: https://monzo.com/.well-known/monzo-age-public-keys.txt

# Careers at Monzo
Hiring: https://monzo.com/careers/

# Location of security.txt
Canonical: https://monzo.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE3NOClmEID1JXFAWSAvDa5e3pfSsFAma/eoUACgkQAvDa5e3p
fSvHSQ/9FpCrvf9YFfaipeNQps9Rem6jxI7xGCt6H0udUAbFk6swuFgC3na3hX6j
o/7+BxYRidLc9x1PulhrM0Fk7cPZhztz6ZIGNrWx5qNPOxwK+kx2sAmLZy/MPJMu
IFLQcJn2pgsw8pSQiDv/67bbByx4EY7yJCKJE/P2o8omt0PZ7/MPW9DP6tipAuYW
CzuOFXdZvbetJRt/oxxRKWA/8DNFGfCAgskcuITr6Ff9S0WyrHD1rXzklJ9V+5Co
FakBCI+rRirbBi250tdzxx+qyxzHY55sToX8RyO3UBSwU/csn5NKjpfd6Mh7WYU9
tmh1JcENgrXSvQ3OWyIJzdDTCYlqedagqVcq06iulNCCBdexSrOQtIgw39UduWJo
Uf0tAAmDNXE5f77aRIHD5HbSOerHF+rtqU/V0slq1vwJs7cCnloCJtfJD0q8RXHf
P1mhfItosw+VAxPj4xbwffxWyOCvModzSuFsr6zNpz0nKTYDqqYAFh+RX0XKpqVi
r1eZZPpHKPHwYK2LQA/O8tfxE3tlH3fMVZrVtePWuu7yx/Ftb9yL3nh5ktUo1Mqv
WSA4Lyp4J6oNbYWBRXPTgx/MMA+d1JEsZsm5ZVjB3JKotYLN7LCfjxTgwpcUc2O0
rcIHyYVWEFGT5gYM4VwmcAvEf/sUekjqSLZ76qQ1QllywvRyXow=
=91kE
-----END PGP SIGNATURE-----