A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:security@logsnitch.com
Encryption: https://logsnitch.com/logsnitch.pgp.asc
Canonical: https://logsnitch.com/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----

iQFLBAEBCAA1FiEEpk1jCXG7asbmt6oScxL/YTAUO1UFAl31KJ4XHHNlY3VyaXR5
QGxvZ3NuaXRjaC5jb20ACgkQcxL/YTAUO1UfjQgAsQyMl6YoI3dXhngczDJxQ4SX
JBlQIScohE/XcPbyG+dAuBaneyhB26YoB740dniP19XtHXCvmZOw/IzDDs7CRWdb
tqJp9YsNFeJH15Dc/aT/N4AUhm5UZmhLa3C0VRs49T3ks7VczYdNiyqR6oGX8QCH
HVZkgUFhWlbp4IxIuTWyAvfPvgLrKVvlaWPNFi6BTM7h3gYVfaqXOymXz6EyvuAt
ucsr+f5coH6l2KYXapVsSbmoxRK+2TMDby8VL36sO8iRgaiZM50HZP/eSQJQdfkS
xoQCN6HEo3lbXxkBRRStLOkgVUMIlbN6n176+TtCCKgq7GSmTZO6rU8B2tnuqQ==
=y8NS
-----END PGP SIGNATURE-----