A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@lyyti.com
Encryption: https://lyyti.fi/pgp/pgp_key.asc
Preferred-Languages: en, fi, sv
Canonical: https://lyyti.fi/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEixHRQRy2RAp0usw5cHXy1+f/5i0FAl3w+vUACgkQcHXy1+f/
5i0WrQf/cWQXpCyl7dJMPwhl1FSLm+/TJ31Zj8eJIIRCOjZP8SOVfonhcWpYp7n3
n15dQzvIi6qTDeLGjVYHHOvhVhYH9tJi4dAQ15GO73O21/2h5s84XqpjdYVf8R1L
qBvC23c4Rp6w861DBKQjqLTibVGyv4yCXi6MRGWaWhOnC87HhDuAqF1vOUKDoSkf
f5WO4gaTfig6wVxK93W2A+4ScyNzIg4IFjY8KYfBxBAOopSMNwVVed47VGgOskCJ
u5s63LpPZIk4s59mMu7iyV84DYDjSLn6eXE5I7RqJkaKTwB5RQjZbS/6y3jaInjr
9OIVKN2gkkgx6qY0bsF/DfxVKr4BjA==
=s/D/
-----END PGP SIGNATURE-----